-
As discussed in the last meeting #857. I'm creating this issue to, discuss and follow the evolution of this new Security-WG initiative for 2023.
The main idea is to assess how the Node.js project i…
-
Hi everyone,
I've recently noticed a proliferation of security parameter/configuration specifications within our company, such as the "Redis security configuration baseline."
Upon reviewing thes…
-
New charter proposal, reviewers please take note.
# Charter Review
[Accessible Rich Internet Applications:](https://w3c.github.io/charter-drafts/2024/aria-charter.html)
[diff from charter tem…
-
The Trusted Repository Security Initiative Task Force was created from roundtables at the Secure OSS Policy Summit in Washington D.C. in Sept. 2023 and would like to work as a SIG within the Supply Ch…
-
This is one of the initiatives we agree on for 2023. We all know how hard and time-consuming is to perform a security release. However, some of the 42 steps can be easily handled by automation. This i…
-
## Background
Currently (March 2024), the project consists of the following working groups: [Serving](https://github.com/knative/community/blob/1177cc1b0ea1c6142b53db88bc6a3a0f9f043ee3/working-grou…
-
The [Starter Viability Model](https://chaoss.community/?p=5608), talks about some of the reasons to care about change requests that aren't reflected in the actual [Change Request](https://github.com/c…
-
RFC to track Governing Board Dependability Pillar 2024 Security Goals
- Zephyr Project shall facilitate product developers to be able to align with security requirements for products as required and…
-
The following issue contains the VCWG's Accessibility Self-Review of Controller Documents v1.0.
The specification is a way of expressing identifiers and cryptographic material that is not exposed …
-
In this advisory no alias is attached https://github.com/nodejs/security-wg/blob/main/vuln/npm/104.json, we should store a made-up alias for these advisories.