ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: usr / share / doc / nodejs-docs-16.20.2 / doc / contributing

# Security Steward Onboarding/OffBoarding

## Onboarding

* Confirm the new steward agrees to keep all private information confidential
  to the project and not to use/disclose to their employer.
* Add them to the security-stewards team in the GitHub nodejs-private
  organization.
* Add them to the [public website team](https://github.com/orgs/nodejs/teams/website).
* Ensure they have 2FA enabled in H1.
* Add them to the standard team in H1 using this
  [page](https://hackerone.com/nodejs/team_members).
* Add them as managers of the
  [nodejs-sec](https://groups.google.com/g/nodejs-sec/members) mailing list.

## Offboarding

* Remove them from security-stewards team in the GitHub nodejs-private
  organization.
* Remove them from public website team
* Unless they have access for another reason, remove them from the
  standard team in H1 using this
  [page](https://hackerone.com/nodejs/team_members).
* Downgrade their account to regular member in the
  [nodejs-sec](https://groups.google.com/g/nodejs-sec/members) mailing list.

[-] node-postmortem-support.md [edit]
[-] using-symbols.md [edit]
[-] offboarding.md [edit]
[-] maintaining-dependencies.md [edit]
[-] maintaining-zlib.md [edit]
[-] maintaining-shared-library-support.md [edit]
[-] components-in-core.md [edit]
[-] internal-api.md [edit]
[-] maintaining-cjs-module-lexer.md [edit]
[-] commit-queue.md [edit]
[+] ..
[+] doc_img
[-] maintaining-http.md [edit]
[-] adding-new-napi-api.md [edit]
[-] strategic-initiatives.md [edit]
[-] writing-tests.md [edit]
[-] maintaining-root-certs.md [edit]
[-] using-internal-errors.md [edit]
[-] maintaining-openssl.md [edit]
[-] collaborator-guide.md [edit]
[-] investigating-native-memory-leaks.md [edit]
[-] maintaining-web-assembly.md [edit]
[-] maintaining-c-ares.md [edit]
[-] maintaining-icu.md [edit]
[-] maintaining-types-for-nodejs.md [edit]
[-] issues.md [edit]
[-] writing-and-running-benchmarks.md [edit]
[-] maintaining-the-build-files.md [edit]
[-] technical-values.md [edit]
[-] cpp-style-guide.md [edit]
[-] security-steward-on-off-boarding.md [edit]
[-] technical-priorities.md [edit]
[-] backporting-to-release-lines.md [edit]
[-] releases.md [edit]
[-] maintaining-V8.md [edit]
[-] diagnostic-tooling-support-tiers.md [edit]
[-] security-model-strategy.md [edit]
[-] security-release-process.md [edit]
[-] building-node-with-ninja.md [edit]
[-] feature-request-management.md [edit]
[-] pull-requests.md [edit]
[-] maintaining-npm.md [edit]
[-] static-analysis.md [edit]
[-] primordials.md [edit]
[-] code-of-conduct.md [edit]