nodejs
diff --git a/Collapse file
‎doc/contributing/security-release-process.md‎
Copy file name to clipboardExpand all lines: doc/contributing/security-release-process.md
+8Lines changed: 8 additions & 0 deletions
Display the source diff
Display the rich diff b/Collapse file
‎doc/contributing/security-release-process.md‎
Copy file name to clipboardExpand all lines: doc/contributing/security-release-process.md
+8Lines changed: 8 additions & 0 deletions
Display the source diff
Display the rich diff
@@ -118,6 +118,7 @@ out a better way, forward the email you receive to
 `oss-security@lists.openwall.com` as a CC.
 
 * [ ] Create a new issue in [nodejs/tweet][]
+
   ```text
   Security release pre-alert:
 
@@ -130,6 +131,13 @@ out a better way, forward the email you receive to
   https://nodejs.org/en/blog/vulnerability/month-year-security-releases/
   ```
 
+  We specifically ask that collaborators other than the releasers and security
+  steward working on the security release do not tweet or publicise the release
+  until the tweet from the Node.js twitter handle goes out. We have often
+  seen tweets sent out before the release and associated announcements are
+  complete which may confuse those waiting for the release and also takes
+  away from the work the releasers have put into shipping the releases.
+
 * [ ] Request releaser(s) to start integrating the PRs to be released.
 
 * [ ] Notify [docker-node][] of upcoming security release date: _**LINK**_