Repository navigation
We need more people for the security triage #1760
Description
Activity
If the triager does not need to be a collaborator/TSC I can vouch for @Aditi-1400 who's interested in volunteering. She might need some initial guidance but I can vouch for her professionalism and accountability as her coworker. Not exactly security but she’s also been helping out with some crypto features among many other things: https://github.com/nodejs/node/issues?q=author:Aditi-1400
Reacted by Aditi, Yagiz Nizipli, Ruy Adorno, Gireesh Punathil, Chengzhong Wu, Sebastian Beltran and Matteo CollinaI can volunteer also as security releaser
Reacted by Ruy Adorno, Gireesh Punathil and Chengzhong WuIf the triager does not need to be a collaborator/TSC
As far as I know, we expect the volunteer to be at least a collaborator on the project (as evaluating the reports requires an understanding of Node.js internals). However, the volunteer doesn't need to be a TSC member.
As soon as @Aditi-1400 is comfortable with the project internals and fine to be nominated as a core collaborator, I'm +1.
Reacted by Matteo Collina, Joyee Cheung and Chengzhong WuTriage means reviewing incoming h1 reports? I used to do that but I don't get them anymore due to (I assume) some kind of reshuffle.
Do you want access? Very happy to add you back!
I can't in all honesty say I really missed it (lots of drivel) but sure, let's give it a go.
Reacted by Matteo Collina and Rafael Gonzaga@mcollina did you add me? I still can't seem to access any h1 reports.
@bnoordhuis I have just sent the invite to info@bnoordhuis.nl.
Received and accepted, thanks!
Reacted by Ruy Adorno, Matteo Collina and Robin Bender GinnReacted by Matteo Collina and Robin Bender GinnWhile I'm not in the TSC I've offered to volunteer as a steward and have been added into the README.md under that section - is there something else I need to if I want to be onboarded to being able to assist with the triage role in H1/slack etc. stuff too which seems to be a reasonable thing after becoming a steward (Not a Stewart, which I already am) @mcollina @RafaelGSS ?
Reacted by Matteo CollinaReacted by Beth Griggs@richardlau can you take care of it?
@richardlau can you take care of it?
I don't think I'm best place to do that since I have never taken on the steward or triage roles and I do not think I have permission to, e.g. add people to Hackerone.
- added a commit that references this issue
on Jun 28, 2026 - added a commit that references this issue
on Jul 3, 2026 - added a commit that references this issue
on Jul 8, 2026 - added 3 commits that reference this issue
on Jul 21, 2026 - added a commit that references this issue
on Jul 30, 2026
Are there any other volunteers in the @nodejs/tsc?
Current ones are:
@vdeturckheim
@RafaelGSS
@mcollina / myself