From d69a8cd2bd43b3191d77b86433df48fe970ffdba Mon Sep 17 00:00:00 2001 From: Russ Cox Date: Mon, 6 Dec 2021 15:45:29 -0500 Subject: [PATCH] Updated GerritAccess (markdown) --- GerritAccess.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/GerritAccess.md b/GerritAccess.md index e4e3a207..9dbf940b 100644 --- a/GerritAccess.md +++ b/GerritAccess.md @@ -20,6 +20,8 @@ If you are an approver, you can (and are encouraged to) Trust+1 every change you To request approver access, reference https://go-review.googlesource.com/#/admin/groups/1005,members in your bug. See below. +As an exception to the usual rules, the usual approvers group does not have Code-Review and Trust voting ability in the x/website repo. There, those votes are limited to Go team members working at Google. This restriction exists for supply chain security reasons, because commits to x/website are automatically go live on https://go.dev/, which serves Go binary downloads. + ## Running Trybots ("may-start-trybots") Trybot access lets you kick off a trybot run, testing a CL in Gerrit against the most common builders. The Trybots run in a somewhat-secure and somewhat-isolated environment, but they're not perfectly security hardened. You must skim the CL for anything malicious before starting Trybots.