Closed pshiu closed 6 months ago
Started to address "What are the expectations for on-call?" in new section On-Call Duties section on our "For working group members" Confluence page.
Added runbook on finding a maintainer in our Security Playbooks.
Started draft sections:
Added to Triage security@openedx.org emails.
Added section Forward a report to an operator or Axim.
Next steps:
@alangsto & I met and compiled the current 2U practices. We now need to compare them.
@alangsto & I met and added details to Security Playbooks – for Security WG members.
@feanil & I met and we worked on Common Issues.
We need a runbook so it's clear to working group members how to respond to security disclosures.
Some open questions from: https://openedx.atlassian.net/wiki/spaces/COMM/pages/3624140816/Security+Working+Group+Private: