nodejs/security-wg issues and pull requests

#1399 - Add zoom link to recurring calendar invite

Issue - State: open - Opened by bmuenzenmeyer 5 days ago

#1398 - Node.js Security team Meeting 2024-11-07

Issue - State: closed - Opened by mhdawson 13 days ago - 2 comments

#1397 - docs: meeting notes for 2024-10-24

Pull Request - State: closed - Opened by UlisesGascon 19 days ago

#1396 - Node.js Security team Meeting 2024-10-24

Issue - State: closed - Opened by mhdawson 27 days ago - 2 comments

#1395 - sry i misleading about wriite

Issue - State: closed - Opened by functionofpwnosec about 1 month ago - 3 comments

#1394 - doc: add 10-10-2024 meeting notes

Pull Request - State: closed - Opened by RafaelGSS about 1 month ago

#1393 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] about 1 month ago - 1 comment
Labels: security-wg-agenda

#1392 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] about 1 month ago

#1391 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] about 1 month ago
Labels: security-wg-agenda

#1390 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] about 1 month ago

#1389 - Node.js Security team Meeting 2024-10-10

Issue - State: closed - Opened by mhdawson about 1 month ago

#1388 - Script execution control on Linux

Issue - State: open - Opened by l0kod about 2 months ago - 1 comment

#1387 - update: cleanup repository

Pull Request - State: closed - Opened by RafaelGSS about 2 months ago

#1386 - doc: add meeting note 2024-09-26

Pull Request - State: closed - Opened by RafaelGSS about 2 months ago

#1385 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] about 2 months ago
Labels: security-wg-agenda

#1384 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] about 2 months ago

#1383 - chore(deps): bump inquirer from 7.3.3 to 11.0.2

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 1 comment
Labels: dependencies, javascript

#1382 - Node.js Security team Meeting 2024-09-26

Issue - State: closed - Opened by mhdawson about 2 months ago

#1381 - chore(deps): bump inquirer from 7.3.3 to 11.0.1

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: dependencies, javascript

#1380 - doc: add 2024-09-12 meeting notes

Pull Request - State: closed - Opened by RafaelGSS 2 months ago - 1 comment

#1379 - update core index.json

Pull Request - State: closed - Opened by github-actions[bot] 2 months ago
Labels: security-wg-agenda

#1378 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] 2 months ago
Labels: security-wg-agenda

#1377 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 2 months ago

#1376 - chore(deps): bump inquirer from 7.3.3 to 10.2.2

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: dependencies, javascript

#1375 - Node.js Security team Meeting 2024-09-12

Issue - State: closed - Opened by mhdawson 2 months ago - 1 comment

#1374 - Add severity to JSON feed

Pull Request - State: closed - Opened by srmish-jfrog 3 months ago

#1373 - chore(deps): bump axios from 1.7.5 to 1.7.7

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, javascript

#1372 - Add "severity" to vuln/core JSON vulnerability feed

Issue - State: closed - Opened by srmish-jfrog 3 months ago - 7 comments

#1371 - doc: add 2024-08-29 meeting notes

Pull Request - State: closed - Opened by RafaelGSS 3 months ago - 1 comment

#1370 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] 3 months ago
Labels: security-wg-agenda

#1369 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 3 months ago

#1368 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] 3 months ago
Labels: security-wg-agenda

#1367 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 3 months ago

#1366 - chore(deps): bump axios from 1.7.4 to 1.7.5

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, javascript

#1365 - Node.js Security team Meeting 2024-08-29

Issue - State: closed - Opened by mhdawson 3 months ago - 1 comment

#1364 - Discuss WDAC (code integrity on Windows)

Issue - State: open - Opened by rdw-msft 3 months ago - 1 comment

#1363 - chore(deps): bump axios from 1.7.3 to 1.7.4

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, javascript

#1362 - chore(deps): bump inquirer from 7.3.3 to 10.1.8

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, javascript

#1361 - Node.js Security team Meeting 2024-08-15

Issue - State: closed - Opened by mhdawson 3 months ago - 2 comments

#1360 - chore(deps): bump axios from 1.7.2 to 1.7.3

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, javascript

#1359 - chore(deps): bump inquirer from 7.3.3 to 10.1.7

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, javascript

#1358 - doc: add august 1st meeting notes

Pull Request - State: closed - Opened by RafaelGSS 4 months ago

#1357 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 4 months ago

#1356 - chore(deps): bump inquirer from 7.3.3 to 10.1.4

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, javascript

#1355 - Node.js Security team Meeting 2024-08-01

Issue - State: closed - Opened by mhdawson 4 months ago

#1354 - chore(deps): bump semver from 7.6.0 to 7.6.3

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, javascript

#1353 - chore(deps): bump inquirer from 7.3.3 to 10.1.2

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, javascript

#1352 - doc: add 2024-07-18

Pull Request - State: closed - Opened by RafaelGSS 4 months ago

#1351 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] 4 months ago - 1 comment
Labels: security-wg-agenda

#1350 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 4 months ago

#1349 - chore(deps): bump inquirer from 7.3.3 to 10.0.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, javascript

#1348 - Node.js Security team Meeting 2024-07-18

Issue - State: closed - Opened by mhdawson 4 months ago

#1346 - update core index.json

Pull Request - State: closed - Opened by github-actions[bot] 4 months ago
Labels: security-wg-agenda

#1345 - vuln: add latest security release

Pull Request - State: closed - Opened by RafaelGSS 4 months ago

#1344 - chore(deps): bump inquirer from 7.3.3 to 10.0.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, javascript

#1343 - Security Mailing List

Issue - State: closed - Opened by RedYetiDev 4 months ago - 5 comments

#1342 - spam

Issue - State: closed - Opened by Guero101 5 months ago

#1341 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] 5 months ago
Labels: security-wg-agenda

#1340 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 5 months ago

#1339 - Node.js Security team Meeting 2024-07-04

Issue - State: closed - Opened by mhdawson 5 months ago - 4 comments

#1338 - Update scorecard monitor version

Pull Request - State: closed - Opened by UlisesGascon 5 months ago

#1337 - meta: add more info to stale message

Pull Request - State: closed - Opened by RedYetiDev 5 months ago

#1336 - chore(deps): bump joi from 13.7.0 to 17.13.3

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, javascript

#1335 - doc: add 2024-06-20 notes

Pull Request - State: closed - Opened by RafaelGSS 5 months ago

#1334 - doc: update threat model progress

Pull Request - State: closed - Opened by RafaelGSS 5 months ago

#1333 - Node.js maintainers: Threat Model

Issue - State: open - Opened by RafaelGSS 5 months ago - 2 comments
Labels: security-wg-agenda, never-stale

#1332 - Node.js Security team Meeting 2024-06-20

Issue - State: closed - Opened by mhdawson 5 months ago - 1 comment

#1331 - chore(deps-dev): bump braces from 3.0.2 to 3.0.3

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, javascript

#1330 - [Bug]：use pm2 and --experimental-permission, throw Error: Access to this API has been restricted

Issue - State: closed - Opened by skypesky 5 months ago - 1 comment
Labels: stale

#1329 - Ping TSC on deps update not from GithubBot

Issue - State: open - Opened by marco-ippolito 5 months ago - 11 comments
Labels: good first issue

#1328 - doc: add 2024-06-06 meeting notes

Pull Request - State: closed - Opened by UlisesGascon 5 months ago

#1327 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] 5 months ago - 4 comments
Labels: security-wg-agenda

#1326 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 5 months ago

#1325 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] 5 months ago
Labels: security-wg-agenda

#1324 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 5 months ago

#1323 - chore(deps): bump inquirer from 7.3.3 to 9.2.23

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, javascript

#1322 - Node.js Security team Meeting 2024-06-06

Issue - State: closed - Opened by mhdawson 6 months ago - 4 comments

#1321 - chore(deps): bump axios from 1.7.1 to 1.7.2

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, javascript

#1320 - doc: add 2024-05-23 notes

Pull Request - State: closed - Opened by RafaelGSS 6 months ago

#1319 - doc: add 2024 initiatives

Pull Request - State: closed - Opened by RafaelGSS 6 months ago

#1318 - build(deps): bump inquirer from 7.3.3 to 9.2.22

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, javascript

#1317 - build(deps): bump axios from 1.6.8 to 1.7.1

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, javascript

#1316 - Node.js Security team Meeting 2024-05-23

Issue - State: closed - Opened by mhdawson 6 months ago

#1315 - build(deps): bump inquirer from 7.3.3 to 9.2.21

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, javascript

#1314 - build(deps): bump semver from 7.6.0 to 7.6.2

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, javascript

#1313 - Initiatives 2024 votes

Pull Request - State: closed - Opened by RafaelGSS 6 months ago - 4 comments

#1312 - OpenSSF Scorecard Report Updated

Pull Request - State: closed - Opened by github-actions[bot] 6 months ago - 1 comment
Labels: security-wg-agenda

#1311 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 6 months ago

#1310 - doc: add 2024-05-09 meeting notes

Pull Request - State: closed - Opened by RafaelGSS 6 months ago

#1309 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 6 months ago

#1308 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 6 months ago

#1307 - OpenSSF Scorecard Report Updated!

Issue - State: closed - Opened by github-actions[bot] 6 months ago

#1306 - Update CII-Best-Practices for Nodejs: Silver level

Pull Request - State: open - Opened by UlisesGascon 6 months ago
Labels: CII-best-practices, never-stale

#1305 - Update CII-Best-Practices for Nodejs: Entry level

Pull Request - State: closed - Opened by UlisesGascon 6 months ago
Labels: CII-best-practices

#1304 - Update Node.js version matrix

Pull Request - State: closed - Opened by UlisesGascon 6 months ago

#1303 - build(deps): bump joi from 13.7.0 to 17.13.1

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, javascript

#1302 - Node.js Security team Meeting 2024-05-09

Issue - State: closed - Opened by mhdawson 7 months ago

#1301 - doc: mark Permission Model as completed

Pull Request - State: closed - Opened by RafaelGSS 7 months ago - 2 comments

#1300 - Permission Model adoption from Package Managers

Issue - State: closed - Opened by RafaelGSS 7 months ago - 4 comments
Labels: stale

#1299 - Adding language to Bug Bounty program to differentiate "security features" from "defense in depth features"

Issue - State: closed - Opened by rdw-msft 7 months ago - 1 comment

GitHub / nodejs/security-wg issues and pull requests