File tree 1 file changed +23
-0
lines changed
1 file changed +23
-0
lines changed Original file line number Diff line number Diff line change
1
+ # Security Steward Onboarding/OffBoarding
2
+
3
+ ## Onboarding
4
+
5
+ * Confirm the new steward agrees to keep all private information confidential
6
+ to the project and not to use/disclose to their employer.
7
+ * Add them to the security-stewards team in the GitHub nodejs-private
8
+ organization.
9
+ * Ensure they have 2FA enabled in H1.
10
+ * Add them to the standard team in H1 using this
11
+ [ page] ( https://hackerone.com/nodejs/team_members ) .
12
+ * Add them as managers of the
13
+ [ nodejs-sec] ( https://groups.google.com/g/nodejs-sec/members ) mailing list.
14
+
15
+ ## Offboarding
16
+
17
+ * Remove them from security-stewards team in the GitHub nodejs-private
18
+ organization.
19
+ * Unless they have access for another reason, remove them from the
20
+ standard team in H1 using this
21
+ [ page] ( https://hackerone.com/nodejs/team_members ) .
22
+ * Downgrade their account to regular member in the
23
+ [ nodejs-sec] ( https://groups.google.com/g/nodejs-sec/members ) mailing list.
You can’t perform that action at this time.
0 commit comments