Skip to content

Commit c0629b4

Browse files
mhdawsonruyadorno
authored andcommittedFeb 7, 2022
doc: add security-steward rotation information
Add information about security stewards and rotation. Signed-off-by: Michael Dawson <[email protected]> PR-URL: #41707 Reviewed-By: Matteo Collina <[email protected]> Reviewed-By: Vladimir de Turckheim <[email protected]> Reviewed-By: Bryan English <[email protected]> Reviewed-By: Mohammed Keyvanzadeh <[email protected]> Reviewed-By: James M Snell <[email protected]> Reviewed-By: Rich Trott <[email protected]>
1 parent 032df4e commit c0629b4

File tree

2 files changed

+46
-0
lines changed

2 files changed

+46
-0
lines changed
 

‎README.md

+24
Original file line numberDiff line numberDiff line change
@@ -729,6 +729,30 @@ use these keys to verify a downloaded file.
729729

730730
</details>
731731

732+
### Security release stewards
733+
734+
When possible, the commitment to take slots in the
735+
security release steward rotation is made by companies in order
736+
to ensure individuals who act as security stewards have the
737+
support and recognition from their employer to be able to
738+
prioritize security releases. Security release stewards manage security
739+
releases on a rotation basis as outlined in the
740+
[security release process](./doc/contributing/security-release-process.md).
741+
742+
* Datadog
743+
* [bengl](https://github.com/bengl) -
744+
**Bryan English** <<bryan@bryanenglish.com>> (he/him)
745+
* [vdeturckheim](https://github.com/vdeturckheim) -
746+
**Vladimir de Turckheim** <<vlad2t@hotmail.com>> (he/him)
747+
* NearForm
748+
* [mcollina](https://github.com/mcollina) -
749+
**Matteo Collina** <<matteo.collina@gmail.com>> (he/him)
750+
* Red Hat and IBM
751+
* [joesepi](https://github.com/joesepi)-
752+
**Joe Sepi** <<joesepi@ibm.com>> (he/him)
753+
* [mhdawson](https://github.com/mhdawson) -
754+
**Michael Dawson** <<midawson@redhat.com>> (he/him)
755+
732756
## License
733757

734758
Node.js is available under the

‎doc/contributing/security-release-process.md

+22
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,28 @@ Security Release and used to track progress on the release. It contains _**TEXT
66
LIKE THIS**_ which will be replaced during the release process with the
77
information described.
88

9+
## Security release stewards
10+
11+
For each security release, a security steward will take ownership for
12+
coordinating the steps outlined in this process. Security stewards
13+
are nominated through an issue in the TSC repository and approved
14+
through the regular TSC consensus process. Once approved, they
15+
are given access to all of the resources needed to carry out the
16+
steps listed in the process as outlined in
17+
[security steward on/off boarding](security-steward-on-off-boarding.md).
18+
19+
The current security stewards are documented in the main Node.js
20+
[README.md](https://github.com/nodejs/node#security-release-stewards).
21+
22+
| Company | Person | Release Date |
23+
| ---------- | -------- | ------------ |
24+
| NearForm | Matteo | 2021-Oct-12 |
25+
| Datadog | Bryan | 2022-Jan-10 |
26+
| RH and IBM | Joe | |
27+
| NearForm | Matteo | |
28+
| Datadog | Vladimir | |
29+
| RH and IBM | Michael | |
30+
931
## Planning
1032

1133
* [ ] Open an [issue](https://github.com/nodejs-private/node-private) titled

0 commit comments

Comments
 (0)