GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — doc: mention DEPENDENCY custom field for H1 reports · nodejs/node@928208c

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

doc/contributing
- security-release-process.md

Expand file treeCollapse file tree

Open diff view settings

Collapse file

`‎doc/contributing/security-release-process.md‎`

Copy file name to clipboardExpand all lines: doc/contributing/security-release-process.md

+2Lines changed: 2 additions & 0 deletions

Display the source diff
Display the rich diff

Original file line number	Diff line number	Diff line change
`@@ -67,6 +67,8 @@ The current security stewards are documented in the main Node.js`
`67`	`67`	`* [ ] 3\. Assigning Severity and Writing Team Summary:`
`68`	`68`	`* [ ] Assign a severity and write a team summary on HackerOne for the reports`
`69`	`69`	chosen in the `vulnerabilities.json`.
	`70`	+ * [ ] If a report targets a Node.js dependency, such as `undici` or `llhttp`,
	`71`	+ make sure to update the `DEPENDENCY` custom field on HackerOne.
`70`	`72`	* Run `git node security --sync` to update severity and summary in
`71`	`73`	`vulnerabilities.json`.
`72`	`74`

0 commit comments

Comments

0 (0)

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.