At a minimum, verify that the master/main branch is "protected" in all RHODS repos.
This is to prevent accidents caused by things like `git push origin master` or force pushing, both of which would be bad.
Also in scope for this:
- Access to repos should be managed at an org level rather than on individual repos.
- If a new team member joins, or an existing member leaves the team, we should not have to audit every single repo
- There should be multiple tiers of permissions (things like admins, maintainers, developers)
Additionally, it has been suggested to use a red hat mailing list as the owner of our repos/orgs rather than a specific individual. Evaluate whether this is something we should so (cchase@redhat.com likely has input on this).