expressjs / expressjs/security-wg

proposal: add the security-triage team as security manager of the organizations

Open
#62 8 comments 0 reactions 1 assignee Claimed by @UlisesGascon View on GitHub
security-wg-agenda tc agenda
Dominant language
No language data
Stars
17
Forks
12
Avg merge
1m
Merged PRs (30d)
1

Description

Now that it's possible to submit reports through GitHub, it would be good to add the security triage team so they can handle them, which would reduce the tasks of the TC.

We should also find a way for the captains to have access to these reports, although with this change, it would no longer be necessary for a TC to be involved in the delivery process, since a triage member could coordinate with the captains and handle the release.

This would also mean that we need to replicate the security triage team in the other organizations we have.

This can be done by assigning a role to a person or a team (https://github.com/organizations/expressjs/settings/org_role_assignments)

![Image](https://github.com/user-attachments/assets/3f21695f-1e97-4ac3-b3ba-081b171278e7)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.