Skip to content

Commit 4ac0df9

Browse files
sam-githubaddaleax
authored andcommitted
doc: no longer maintain a CNA structure
Node.js hasn't touched the cve-management repo since the Feb 2019 security release, we've used the HackerOne CVE allocation process. Maintaining our status as a CNA is not zero cost, there is some routine adminstration that is requested (see this doc for details). As we no longer use the CVE management process, I propose removing it. If this lands, I will go through the interactions with Mitre so that Node.js is no longer a CNA and cleanup related resources (email aliases, archive the cve-management repo, whatever else I find). PR-URL: #33639 Reviewed-By: James M Snell <[email protected]> Reviewed-By: Vladimir de Turckheim <[email protected]> Reviewed-By: Ruben Bridgewater <[email protected]> Reviewed-By: Matteo Collina <[email protected]> Reviewed-By: Beth Griggs <[email protected]> Reviewed-By: Michael Dawson <[email protected]> Reviewed-By: Сковорода Никита Андреевич <[email protected]>
1 parent 75637e6 commit 4ac0df9

File tree

1 file changed

+0
-141
lines changed

1 file changed

+0
-141
lines changed

Diff for: doc/guides/cve-management-process.md

-141
This file was deleted.

0 commit comments

Comments
 (0)