[Kubuxu]

Changes

• Invite OzzyHelper to the organization and the new ozzyhelper team.
• Grant the team write access to infra and filecoin-pay-explorer, replacing direct collaborator access.

Verification

• Validated organization membership, team membership, and repository grants in the YAML configuration.

[github-actions]

Before merge, verify that all the following plans are correct. After merge, Apply will regenerate the plans from the merged commit and continue only if they match.

Terraform plans

FilOzone

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place
  - destroy

Terraform will perform the following actions:

  # github_membership.this["ozzyhelper"] will be created
  + resource "github_membership" "this" {
      + downgrade_on_destroy = false
      + etag                 = (known after apply)
      + id                   = (known after apply)
      + role                 = "member"
      + username             = "OzzyHelper"
    }

  # github_repository.this["filecoin-encryption-viewer"] will be updated in-place
  ~ resource "github_repository" "this" {
        id                          = "filecoin-encryption-viewer"
        name                        = "filecoin-encryption-viewer"
        # (36 unchanged attributes hidden)

      ~ security_and_analysis {
          ~ secret_scanning {
              ~ status = "disabled" -> "enabled"
            }
          ~ secret_scanning_push_protection {
              ~ status = "disabled" -> "enabled"
            }
        }
    }

  # github_repository.this["solstice-watchtower"] will be updated in-place
  ~ resource "github_repository" "this" {
        id                          = "solstice-watchtower"
        name                        = "solstice-watchtower"
        # (36 unchanged attributes hidden)

      ~ security_and_analysis {
          ~ secret_scanning {
              ~ status = "disabled" -> "enabled"
            }
          ~ secret_scanning_push_protection {
              ~ status = "disabled" -> "enabled"
            }
        }
    }

  # github_repository_collaborator.this["filecoin-pay-explorer:ozzyhelper"] will be destroyed
  # (because key ["filecoin-pay-explorer:ozzyhelper"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "filecoin-pay-explorer:OzzyHelper" -> null
      - permission = "push" -> null
      - repository = "filecoin-pay-explorer" -> null
      - username   = "OzzyHelper" -> null
    }

  # github_repository_collaborator.this["infra:ozzyhelper"] will be destroyed
  # (because key ["infra:ozzyhelper"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "infra:OzzyHelper" -> null
      - permission = "push" -> null
      - repository = "infra" -> null
      - username   = "OzzyHelper" -> null
    }

  # github_team.this["ozzyhelper"] will be created
  + resource "github_team" "this" {
      + create_default_maintainer = false
      + etag                      = (known after apply)
      + id                        = (known after apply)
      + members_count             = (known after apply)
      + name                      = "ozzyhelper"
      + node_id                   = (known after apply)
      + parent_team_read_id       = (known after apply)
      + parent_team_read_slug     = (known after apply)
      + privacy                   = "secret"
      + slug                      = (known after apply)
    }

  # github_team_membership.this["ozzyhelper:ozzyhelper"] will be created
  + resource "github_team_membership" "this" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + role     = "member"
      + team_id  = (known after apply)
      + username = "OzzyHelper"
    }

  # github_team_repository.this["ozzyhelper:filecoin-pay-explorer"] will be created
  + resource "github_team_repository" "this" {
      + etag       = (known after apply)
      + id         = (known after apply)
      + permission = "push"
      + repository = "filecoin-pay-explorer"
      + team_id    = (known after apply)
    }

  # github_team_repository.this["ozzyhelper:infra"] will be created
  + resource "github_team_repository" "this" {
      + etag       = (known after apply)
      + id         = (known after apply)
      + permission = "push"
      + repository = "infra"
      + team_id    = (known after apply)
    }

Plan: 5 to add, 2 to change, 2 to destroy.

[github-actions]

The following access changes will be introduced as a result of applying the plan:

Access Changes

User ozzyhelper:
  - will join the organization as a member (remind them to accept the email invitation)