One Hat Cyber Team

Your IP: 216.73.216.93
Server IP: 65.108.141.171
Server: Linux server.heloix.com 5.4.0-214-generic #234-Ubuntu SMP Fri Mar 14 23:50:27 UTC 2025 x86_64
Server Software: Apache
PHP Version: 7.4.33
Buat File | Buat Folder

Dir : ~/usr/share/doc/nodejs/contributing/

View File Name : security-steward-on-off-boarding.md

# Security Steward Onboarding/OffBoarding

## Onboarding

* Confirm the new steward agrees to keep all private information confidential
  to the project and not to use/disclose to their employer.
* Add them to the security-stewards team in the GitHub nodejs-private
  organization.
* Add them to the [public website team](https://github.com/orgs/nodejs/teams/website).
* Ensure they have 2FA enabled in H1.
* Add them to the standard team in H1 using this
  [page](https://hackerone.com/nodejs/team_members).
* Add them as managers of the
  [nodejs-sec](https://groups.google.com/g/nodejs-sec/members) mailing list.

## Offboarding

* Remove them from security-stewards team in the GitHub nodejs-private
  organization.
* Remove them from public website team
* Unless they have access for another reason, remove them from the
  standard team in H1 using this
  [page](https://hackerone.com/nodejs/team_members).
* Downgrade their account to regular member in the
  [nodejs-sec](https://groups.google.com/g/nodejs-sec/members) mailing list.