Skip to main content
Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

90 Day Activity Policy

Users with no activity in the Department of Veterans Affairs organization on GitHub Enterprise Cloud in 90 days will be removed as per ATO policy.

Note: This policy only applies to users working in the department-of-veterans-affairs organization. If you work in dva-software organization, your access is managed via Entra ID and you do not need to do anything to maintain your access.

User 90-Day Activity Policy

The Department of Veterans Affairs mandates that users must be removed from GitHub Enterprise Cloud if they are inactive for 90 days. This process is automated and will remove users from the Department of Veterans Affairs organization on GitHub.com if they have not had a recorded activity in the last 90 days.

What is considered activity?

Unfortunately, due to limitations in the GitHub API, we are unable to track all activity on GitHub.com. The following actions are considered activity:

  • A user joins the Department of Veterans Affairs organization on GitHub.com
  • A user commits to a repository in the Department of Veterans Affairs organization on GitHub.com
  • A user perform an action deemed a Contributions in the Department of Veterans Affairs organization on GitHub.com by the Contributions API
  • A user creates or comments on an issue in the Department of Veterans Affairs organization on GitHub.com
  • A user creates a release in the Department of Veterans Affairs organization on GitHub.com.

How do I know if I am at risk of being removed?

Once a week, an automated process will run and create an issue in the github-inactive-user-mentions repository. This issue will be assigned to directly to you.

The creation of this issue, also generates an automated notification email to the user from GitHub.

How do I prevent being removed?

To prevent being removed from the Department of Veterans Affairs organization on GitHub.com, you must perform one of the activities mentioned above. If you have not performed one of these activities in the last 90 days, there are few options available to you.

  • Open a Preserve User request in the github-user-requests repository.
  • Comment on the issue assigned to you in the github-inactive-user-mentions repository.
  • Reply-All to the email notification you received from GitHub when the issue was created in the github-inactive-user-mentions repository.
    • You must reply-all to the email notification to ensure that the issue is updated with your comment.

What happens if I am removed?

If you are removed from the Department of Veterans Affairs organization on GitHub.com, you will lose access to all repositories in the Department of Veterans Affairs organization on GitHub.com.

To restore your access, simply request access again via the documented Getting Access process.

Once you have access again, you may restore you team membership by navigating to the Reinstate User workflow in the github-user-requests repository. Once on the page, simply click the Run workflow button to the right of the page and enter you GitHub username in the username field and click the Run workflow button.

Note: This automated workflow is only able to restore your access to teams if you were removed in the previous 90 days.

If you were removed more than 90 days ago, you will need to request access to these teams again from the team owners.

Return to Policies and Standards