Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Commit e178acf

Browse filesBrowse files
RafaelGSSaduh95
authored andcommitted
doc: ping nodejs/tsc for each security pull request
Refs: nodejs/TSC#1687 PR-URL: #57309 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Michael Dawson <midawson@redhat.com> Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
1 parent 2daee76 commit e178acf
Copy full SHA for e178acf

File tree

Expand file treeCollapse file tree

1 file changed

+3
-0
lines changed
Open diff view settings
Filter options
Expand file treeCollapse file tree

1 file changed

+3
-0
lines changed
Open diff view settings
Collapse file

‎doc/contributing/security-release-process.md‎

Copy file name to clipboardExpand all lines: doc/contributing/security-release-process.md
+3Lines changed: 3 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,9 @@ The current security stewards are documented in the main Node.js
5656
* Use the "summary" feature in HackerOne. Example [2038134](https://hackerone.com/reports/2038134)
5757
* `git node security --add-report=report_id`
5858
* `git node security --remove-report=report_id`
59+
* Ensure to ping the Node.js TSC team for review of the PRs prior to the release date.
60+
* Adding individuals with expertise in the report topic is also a viable option if
61+
communicated properly with nodejs/security and TSC.
5962

6063
* [ ] 3\. **Assigning Severity and Writing Team Summary:**
6164
* [ ] Assign a severity and write a team summary on HackerOne for the reports

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.