From 22c12037c5758b16157e431b3acd346764682d8b Mon Sep 17 00:00:00 2001
From: Andrii Shyshkalov <tandrii@chromium.org>
Date: Thu, 16 Feb 2017 18:53:16 +0100
Subject: [PATCH] CQ config: add gerrit CQAbility verifier.

Goal is to ensure that unreviewed and untrusted code isn't sent through
CQ to try bots, by accident or through malicious intent.

R=kjellander@google.com
BUG=chromium:692613
NOTRY=True

Change-Id: If10d778b9c9866593a4c6c36216ed0e1c12fa1d5
Reviewed-on: https://chromium-review.googlesource.com/443546
Reviewed-by: Henrik Kjellander <kjellander@chromium.org>
Commit-Queue: Andrii Shyshkalov <tandrii@chromium.org>
---
 infra/config/cq.cfg | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/infra/config/cq.cfg b/infra/config/cq.cfg
index 7a0d2d84f..ff0347d63 100644
--- a/infra/config/cq.cfg
+++ b/infra/config/cq.cfg
@@ -15,6 +15,11 @@ rietveld {
 verifiers {
   reviewer_lgtm {
     committer_list: "project-libyuv-committers"
+    dry_run_access_list: "project-libyuv-tryjob-access"
+  }
+  gerrit_cq_ability {
+    committer_list: "project-libyuv-committers"
+    dry_run_access_list: "project-libyuv-tryjob-access"
   }
 
   try_job {