feat: copy playbooks from electron/maintainers #9
Conversation
playbooks/security-incidents.md
Outdated
| @@ -0,0 +1,46 @@ | |||
| # Security Incidents | |||
There was a problem hiding this comment.
Can we not copy this over verbatim, it's an action item of the Secutity WG to develop an new play for this taking into account our new structure and permission model
There was a problem hiding this comment.
👍 on modifying those rules to take governance into account, but since the playbook includes a lot besides security, IMO it would be slightly cleaner to write / refine those rules in a separate PR.
There was a problem hiding this comment.
Oh sorry if that wasn't clear, I was specifically referring to just this document not all the playbooks. It's currently just wrong about a lot of things (especially taking into account our new structure). This document also doesn't accurately reflect the way things are done currently.
I have a draft PR for electron/security (that will end up in this repo under wg-security once merged approved in /security) for what our disclosure policy / response procedure will be.
There was a problem hiding this comment.
I've removed security-incidents.md.
NB the Security Incidents in playbooks/README.md now has a FIXME link for the document you're working on. Please update this link when your PR gets merged.
This will be replaced with a new document in by @MarshallOfSound
Does what it says on the tin -- this is a
cp -R+git -Ato bring the playbooks into the governance repo.