Require 2FA in all Github and GitLab repos

[sampierson]

As a DCP stakeholder, I want all developer accounts to be secured with 2FA, so that a compromised password alone won't allow malicious actors to inject malware into the DCP codebase.

It would be nice if we could just turn on the "everybody in this organization must have 2FA set up" GitHub feature, but we cannot, as there are many members of the organization peripherally attached to the HCA (Jamboree attendees) that don't have 2FA set up, and that we cannot contact and don't want to alienate by kicking them out of the org.

So an alternate strategy was devised to secure all the DCP component repos:

A transitional group has been created: "HCA" that contains all HCA members and has write access to all repos.

Each component team must now:

• create or add their developers to a different group
• give that group write-access to their repo(s)
• remove write access from the "HCA" team

I'm going to create a ticket in all DCP component repos for this. My apologies if you have already completed this work. Just close the ticket for your team if you have.