Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
doc: allow for holidays in triage response
Signed-off-by: Michael Dawson <mdawson@devrus.com>

PR-URL: #45267
Reviewed-By: Gireesh Punathil <gpunathi@in.ibm.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
  • Loading branch information
mhdawson authored and danielleadams committed Jan 3, 2023
1 parent bef5206 commit 00e02bd
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions SECURITY.md
Expand Up @@ -4,9 +4,11 @@

Report security bugs in Node.js via [HackerOne](https://hackerone.com/nodejs).

Your report will be acknowledged within 5 days, and you'll receive a more
detailed response to your report within 10 days indicating the next steps in
handling your submission.
Normally your report will be acknowledged within 5 days, and you'll receive
a more detailed response to your report within 10 days indicating the
next steps in handling your submission. These timelines may extend when
our triage volunteers are away on holiday, particularly at the end of the
year.

After the initial reply to your report, the security team will endeavor to keep
you informed of the progress being made towards a fix and full announcement,
Expand Down

0 comments on commit 00e02bd

Please sign in to comment.