Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
1461f86
docs: add document to handle security reports
UlisesGascon Mar 5, 2025
c30511c
docs: add Security Report Handling Flowchart
UlisesGascon Mar 5, 2025
1a9042a
docs: add roles
UlisesGascon Mar 7, 2025
7aac07b
docs: add runbook
UlisesGascon Mar 7, 2025
03d7b60
Update docs/handle_security_reports.md
UlisesGascon Mar 8, 2025
dba71a6
Update docs/handle_security_reports.md
UlisesGascon Mar 8, 2025
99b4102
Update docs/handle_security_reports.md
UlisesGascon Mar 8, 2025
054ab8a
fix: format issues
UlisesGascon Mar 8, 2025
707c04d
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
eec7b04
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
de83da8
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
e88d94d
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
ee83fa1
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
799e888
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
315b02c
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
183adc6
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
014a4b1
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
fbc2d2c
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
fa6bf1b
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
6bb6700
Update docs/handle_security_reports.md
UlisesGascon Apr 2, 2025
0241b7c
Update docs/handle_security_reports.md
UlisesGascon Apr 22, 2025
2544711
Update docs/handle_security_reports.md
UlisesGascon Apr 22, 2025
38b6532
Update docs/handle_security_reports.md
UlisesGascon Apr 22, 2025
8c09fbb
Update docs/handle_security_reports.md
UlisesGascon Apr 22, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update docs/handle_security_reports.md
Co-authored-by: Chris de Almeida <ctcpip@users.noreply.github.com>
  • Loading branch information
UlisesGascon and ctcpip authored Apr 2, 2025
commit 183adc6dfe62be735f92261cd96b7e34ca9ba202
2 changes: 1 addition & 1 deletion docs/handle_security_reports.md
Original file line number Diff line number Diff line change
Expand Up @@ -124,7 +124,7 @@ Ideally, the report must contain **clear and detailed information** like (Affect

1.2 If the report was created accidentally or intentionally in a public channel (e.g. GitHub issues), it is important to share this information asap in the private slack channel `#express-security-triage` so the Security triage team is aware of it. At this stage, our priority is to remove the report from public view as soon as possible and let the reporter know what happened next.

1.2.1 In the case of a report made public in a Pull request or issue under the Express organizations ownership the following process will be followed (by a Express TC member - due permissions level):
1.2.1 In the case of a report made public in a Pull request or issue under the Express organizations ownership the following process will be followed (by an Express TC member):

* Move the issue to the private repository called [expressjs/security-triage](https://github.com/expressjs/security-triage).
* For any related pull requests, create an associated issue in [expressjs/security-triage](https://github.com/expressjs/security-triage) repository. Add a copy of the patch for the pull request to the issue. Add screenshots of discussion from the pull request to the issue.
Expand Down