Skip to content

Issues: nodejs/security-wg

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

20 Open 486 Closed
20 Open 486 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Add a warning on EOL versions security-wg-agenda
#1401 opened Nov 19, 2024 by RafaelGSS
5
Node.js Security team Meeting 2024-11-21
#1400 opened Nov 18, 2024 by mhdawson
1
@mhdawson
4
Script execution control on Linux
#1388 opened Sep 27, 2024 by l0kod
1
Discuss WDAC (code integrity on Windows)
#1364 opened Aug 21, 2024 by rdw-msft
2
Node.js maintainers: Threat Model never stale security-wg-agenda
#1333 opened Jun 20, 2024 by RafaelGSS
2
Ping TSC on deps update not from GithubBot good first issue
#1329 opened Jun 13, 2024 by marco-ippolito
1
11
Collaborators Inactivity Policy Review never stale
#1282 opened Apr 17, 2024 by marco-ippolito
5
Proposed approach for build steps in deps which are not in make node
#1236 opened Feb 22, 2024 by mhdawson
12
Requirement (Gold level): Secured delivery against man-in-the-middle (MITM) attacks CII-best-practices never stale
#1190 opened Jan 4, 2024 by UlisesGascon
5
Requirement (Gold level): Use basic good cryptographic practices never stale
#1189 opened Jan 4, 2024 by UlisesGascon
6
Requirement (Gold level): The project MUST have FLOSS automated test suite(s) that provide at least 80% branch and 90% statement coverage CII-best-practices never stale
#1188 opened Jan 4, 2024 by UlisesGascon
3 tasks
3
Requirement (Gold level): The project MUST include a license and copyright statement in each source file CII-best-practices never stale
#1187 opened Jan 4, 2024 by UlisesGascon
1 task
5
Security initiative in December 2023: fuzzing Nodejs: https://github.com/google/oss-fuzz/tree/master/projects/nodejs
#1159 opened Nov 23, 2023 by Amir-Montazery
8
Have a SBOM for Node.js? never stale
#1115 opened Sep 20, 2023 by marco-ippolito
23
Audit build process for dependencies never stale security-wg-agenda
#1037 opened Jun 22, 2023 by mhdawson
4 of 24 tasks
24
Extend security reporting for LTS lines beyond their lifetimes security-wg-agenda
#1025 opened Jun 16, 2023 by bengl
17
Initiative for CII-Best-Practices for Nodejs Projects CII-best-practices never stale
#953 opened Apr 16, 2023 by UlisesGascon
3 of 7 tasks
@UlisesGascon
33
Automate security release process security-wg-agenda
#860 opened Jan 6, 2023 by RafaelGSS
17
Assessment against best practices (OpenSSF Scorecards ...) never stale
#859 opened Jan 6, 2023 by fraxken
7
Abort when vulnerable flag security-wg-agenda
#852 opened Dec 16, 2022 by RafaelGSS
12
ProTip! Follow long discussions with comments:>50.