git push permissions
summary
Presents a code-first permissions system that keeps access rules in Git and uses GitHub Actions (GitOps) to provision identity provider groups and app entitlements instead of ticketing. Demonstrates an entitlements-app that creates GitHub teams, LDAP groups and Okta assignments from repository files, supports expirations and logical operators, scales to ~4000 employees, and integrates with CodeSpaces and PR-based approval workflows via pluggable providers.
AI-written summary · about
chapters (8)
- 0:00GitHub introduction
- 1:04Permission management issues
- 3:32DevOps and security
- 7:46Automation with GitHub
- 11:20GitHub internal solution
- 17:53Live demo
- 39:54Advanced features
- 42:20Q&A
related talks
24mWhen Git Push Meets Human Pushback: The Culture of GitOpS
11mLightning Talk: How GitOps Changes Identity and RBAC Management
43mGitHub Actions Best Practices
31mGitHub as a self-sustaining product for large-scale environments
40mA Guide to Securing GitHub Based on Lessons Learned
34mStop clicking and start committing: a GitOps workflow for endpoint management
36mRunning GitHub Enterprise at scale in your organization
08mLightning Talk: Automatically Restrict Permissions for the GITHUB Token