Notify the project followers whenever a "Deploy key" gets revoked
complete
L
Luciano Balmaceda
CircleCI projects are set up by clicking the "follow project" button on the CircleCI dashboard. What this does, is creating a new web hook and a new Deploy Key on the Github repository associated to that Github user that followed the project.When a Github user leaves the Github organization or manually revokes the Deploy Key, the CircleCI builds start failing because they can't clone the repository; and this goes a bit unnoticed.Ideally when a key is no longer valid (because it gets revoked, removed, or expires somehow) CircleCI would ping the project followers in any of these ways:Send an emailUse slack/chrome webhooks to push notificationsShow a banner on any recently failed builds informing the keys were not valid.
CCI-I-1534
H
Henna Abbas
complete
This has been addressed with Audit log streaming.
H
Henna Abbas
Hi Luciano Balmaceda - we offer these events in our audit logs. Additionally, we offer audit log streaming to those on a scale plan: https://circleci.com/docs/guides/security/audit-logs/#stream-audit-logs
Would this work for you? if it will not, can you please share additional information as to why not?