[17:14:45] <sumanah> dstufft: I learned in a chat with pradyunsg last week https://wiki.python.org/psf/PackagingWG/2020-01-23-pip#Automation_snags_and_permissions that we need to get privileges from you for a couple Heroku things
[17:16:07] <dstufft> aren't they just on the PSF heroku?
[17:16:13] <dstufft> or maybe they're on my private one hmm
[17:20:00] <dstufft> yea browntruck and pypa-bot are PSF owned apps
[17:23:37] <dstufft> I'm about to step away for lunch, I'm gonna chuck these into the Infra vault in the PSFs 1password, and if EWDurbin is around and can send them to you, then great, otherwise I'll sort out a secure channel when I get back
[18:16:44] <EWDurbin> 😹annnnnnd now github want's device verification for logging into either user. looks like the email is being sent to one of dstufft's addresses.
[18:19:04] <EWDurbin> these bots really need to be retooled to be GitHub apps under the PyPA org to avoid these kinds of hijinks
[21:55:53] <sumanah> dstufft: you saw EWDurbin's note above? about device verification?