Update 2025-08-06.md

Co-authored-by: Joyee Cheung <[email protected]>

Author: mcollina

meetings/2025-08-06.md

@@ -50,7 +50,7 @@
   * Filip: … they are phishing resistant.
   * Matteo: let’s move the issue to the admin repo
   * Richard: I’ll move the issue and change the title.
-  * Matteo: the foundation has no budget right now to fund Yubikeys for a team or even org-wide.
+  * Joyee (side chat): maybe instead of handing out t-shirts at collab summit, we hand out yubikeys (+1 from Darshan, Chengzhong & Matteo)
 * Potentially transition to 1password for secrets management [#4039](https://github.com/nodejs/build/issues/4039)
   * Rirchard: when someone doesn’t leave the team, we do not rotate the keys. The TSC does not have access to all secrets that have access our secrets for Infra. If we move secrets to our Vault, all TSC members will have access, and that will increase the exposure. Are we happy to widen the group of people? One suggestion is to move it to the OpenJS OnePassword
   * Matteo: We could move the TSC members to not be owners and have a separate Vault.