Pull request building and commit status notification are back to normal. Retesting for pull requests updated during the incident has been triggered.
Posted Jul 17, 2017 - 21:17 UTC
After a Jenkins restart the new credentials are being used. We are now tracking down pull requests that did not receive updates and retesting them.
Posted Jul 17, 2017 - 20:53 UTC
The revoked credential was a GitHub access token rather than an ssh key.
Posted Jul 17, 2017 - 18:47 UTC
We identified the problem as an accidentally revoked SSH key from the pull request builder account on Friday. We replaced the key, but now we're getting 401's from GitHub's API. We're still investigating why.
Posted Jul 17, 2017 - 18:41 UTC
Pull request building from build.ros.org is down. We're debugging now.