|
10 | 10 | Table of Contents
|
11 | 11 |
|
12 | 12 | - Vulnerability Management
|
13 |
| - * [Responsible Disclosure Policy](./processes/responsible_disclosure_template.md) |
14 |
| - * [Third-Party Ecosystem Triage Process](./processes/third_party_vuln_process.md) |
15 |
| - * [Third-Party HackerOne Submission form](./processes/third_party_vuln_submit_form_hacker1.md) |
16 | 13 | * [Vulnerability Database](./processes/vuln_db.md)
|
17 | 14 | * [Recognition for Security Researchers](./processes/recognition.md)
|
18 | 15 | - Processes for Security WG Members
|
19 | 16 | * [Security Team Membership Policy](./processes/security_team_membership_policy.md)
|
20 | 17 | * [On-boarding Team Members](./processes/wg_onboarding.md)
|
21 | 18 | * [Off-boarding Team Members](./processes/wg_offboarding.md)
|
22 | 19 | - [Node.js Bug Bounty Program](#nodejs-bug-bounty-program)
|
23 |
| -- [Participate in Responsible Security Disclosure](#participate-in-responsible-security-disclosure) |
24 | 20 | - [Charter](#charter)
|
25 | 21 | - [Code of Conduct](#code-of-conduct)
|
26 | 22 | - [Moderation Policy](#moderation-policy)
|
@@ -59,16 +55,6 @@ The Node.js project engages in an official bug bounty program for security resea
|
59 | 55 |
|
60 | 56 | The program is managed through the HackerOne platform at [https://hackerone.com/nodejs](https://hackerone.com/nodejs) with further details.
|
61 | 57 |
|
62 |
| -## Participate in Responsible Security Disclosure |
63 |
| - |
64 |
| -As a module author you can provide your users with security guidelines regarding any exposures and vulnerabilities in your project, based on a responsible disclosure policy [document](https://github.com/nodejs/security-wg/blob/e2c03e62d73635a766156c6ea4f9aefb35c04603/processes/responsible_disclosure_template.md) we've already put in place. |
65 |
| - |
66 |
| -You can show your users you take security matters seriously and drive higher confidence by following any of the below suggested actions: |
67 |
| - |
68 |
| -1. Adding a `SECURITY.md` file in your repository that you can copy&paste from [us](https://github.com/nodejs/security-wg/blob/e2c03e62d73635a766156c6ea4f9aefb35c04603/processes/responsible_disclosure_template.md). Just like having a contribution of code of conduct guidelines, a security guideline will help user or bug hunters with the process of reporting a vulnerability or security concern they would like to share. |
69 |
| - |
70 |
| -2. Adding our Responsible Security Dislosure badge to your project's README which links to the `SECURITY.md` document. |
71 |
| - |
72 | 58 | ## Current Project Team Members
|
73 | 59 |
|
74 | 60 | * [ChALkeR](https://github.com/ChALkeR) - **Сковорода Никита Андреевич**
|
|
0 commit comments