Commit 6ede1c2
doc: include CVSS mention
PR-URL: #43602
Reviewed-By: Vladimir de Turckheim <vlad2t@hotmail.com>
Reviewed-By: Beth Griggs <bgriggs@redhat.com>
Reviewed-By: Darshan Sen <raisinten@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>1 parent a1f1d3a commit 6ede1c2
1 file changed
Lines changed: 2 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -42,6 +42,8 @@ The current security stewards are documented in the main Node.js | |||
| 42 | 42 | * [ ] PR release announcements in [private](https://github.com/nodejs-private/nodejs.org-private): | |
| 43 | 43 | * (Use previous PRs as templates. Don't forget to update the site banner and | |
| 44 | 44 | the date in the slug so that it will move to the top of the blog list.) | |
| 45 | + * (Consider using a [Vulnerability Score System](https://www.first.org/cvss/calculator/3.1) | ||
| 46 | + to identify severity of each report) | ||
| 45 | 47 | * [ ] pre-release: _**LINK TO PR**_ | |
| 46 | 48 | * [ ] post-release: _**LINK TO PR**_ | |
| 47 | 49 | * List vulnerabilities in order of descending severity | |
0 commit comments