feat(scripts): Forgejo 2FA / account access-review evidence tool (#79) #99

Sammanfogat

supernaut sammanfogade 1 incheckning från feat/79-2fa-access-review in i main

2026-07-18 19:50:22 +00:00

supernaut kommenterad

2026-07-18 07:18:07 +00:00

Ägare

Closes #79. scripts/access-review-2fa.py — stdlib-only tool listing every Forgejo account + security flags (2FA, admin, active, restricted, prohibit-login, last login) via the v16 admin users API, rendering a dated Markdown report for the ISO 27001 access-control review (bitborg-docs#30). 2FA derived from the is_2fa_enabled list filter (PR 12091, not a body field). Reuses a read:admin PAT (the gitborg-token-audit account, #75). Runbook § Access review documents running it + committing the report to a private ISMS evidence store. Admins without 2FA are flagged (expected only for PAT-only service accounts).

Verified: endpoint + filter confirmed against prod swagger 16.0.0; render verified with mock data; py_compile clean; markdownlint clean.

Pairs with the private ISMS evidence update (evidence store + SoA 5.18).

Closes #79. `scripts/access-review-2fa.py` — stdlib-only tool listing every Forgejo account + security flags (2FA, admin, active, restricted, prohibit-login, last login) via the v16 admin users API, rendering a dated Markdown report for the ISO 27001 access-control review (bitborg-docs#30). 2FA derived from the `is_2fa_enabled` list filter (PR 12091, not a body field). Reuses a `read:admin` PAT (the gitborg-token-audit account, #75). Runbook § Access review documents running it + committing the report to a private ISMS evidence store. Admins without 2FA are flagged (expected only for PAT-only service accounts). Verified: endpoint + filter confirmed against prod swagger 16.0.0; render verified with mock data; py_compile clean; markdownlint clean. Pairs with the private ISMS evidence update (evidence store + SoA 5.18).

supernaut tvångsskickade feat/79-2fa-access-review från 219e4e5390

ci / ci (pull_request) Successful in 1m33s

Detaljer

till 45e0d62d6f

ci / ci (pull_request) Successful in 2m9s

Detaljer

2026-07-18 14:58:40 +00:00

Jämför

supernaut tvångsskickade feat/79-2fa-access-review från 45e0d62d6f

ci / ci (pull_request) Successful in 2m9s

Detaljer

till 3539ebf5e5