We need more people for the security triage

[mcollina]

Are there any other volunteers in the @nodejs/tsc?

Current ones are:

@vdeturckheim
@RafaelGSS
@mcollina / myself

[joyeecheung]

If the triager does not need to be a collaborator/TSC I can vouch for @Aditi-1400 who's interested in volunteering. She might need some initial guidance but I can vouch for her professionalism and accountability as her coworker. Not exactly security but she’s also been helping out with some crypto features among many other things: https://github.com/nodejs/node/issues?q=author:Aditi-1400

[marco-ippolito]

I can volunteer also as security releaser

[RafaelGSS]

If the triager does not need to be a collaborator/TSC

As far as I know, we expect the volunteer to be at least a collaborator on the project (as evaluating the reports requires an understanding of Node.js internals). However, the volunteer doesn't need to be a TSC member.

As soon as @Aditi-1400 is comfortable with the project internals and fine to be nominated as a core collaborator, I'm +1.

[bnoordhuis]

Triage means reviewing incoming h1 reports? I used to do that but I don't get them anymore due to (I assume) some kind of reshuffle.

[mcollina]

Do you want access? Very happy to add you back!

[bnoordhuis]

I can't in all honesty say I really missed it (lots of drivel) but sure, let's give it a go.

[bnoordhuis]

@mcollina did you add me? I still can't seem to access any h1 reports.

[RafaelGSS]

@bnoordhuis I have just sent the invite to info@bnoordhuis.nl.

[bnoordhuis]

Received and accepted, thanks!

[sxa]

While I'm not in the TSC I've offered to volunteer as a steward and have been added into the README.md under that section - is there something else I need to if I want to be onboarded to being able to assist with the triage role in H1/slack etc. stuff too which seems to be a reasonable thing after becoming a steward (Not a Stewart, which I already am) @mcollina @RafaelGSS ?

[mcollina]

@richardlau can you take care of it?

[RafaelGSS]

I can onboard you @sxa. Please, give me more details on Slack.

[richardlau]

@richardlau can you take care of it?

I don't think I'm best place to do that since I have never taken on the steward or triage roles and I do not think I have permission to, e.g. add people to Hackerone.