Skip to content

Identity of Committers/Eclipse Account owners

Summary

We need a way to confirm identity of an owner of an Eclipse Account in the case they loose access.

Possible cases: MFA issue, lost access to the main email (merge, contract termination...)

Related to #4641

What is the current bug behavior?

Need to mail EMO and/or webmaster.

What is the expected correct behavior?

A procedure to follow in all cases.

Relevant logs and/or screenshots

Priority

  • Urgent
  • High
  • Medium
  • Low

Severity

  • Blocker
  • Major
  • Normal
  • Low

Impact

This is a potential security issue as attackers could impersonate Eclipse Committers to create long-term supply chain attacks.

/cc @skilpatrick @mdelgado624 @wbeaton @mward