Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
nodejs
/
security-wg
Public
Uh oh!
There was an error while loading.
Please reload this page
.
Notifications
You must be signed in to change notification settings
Fork
133
Star
543
Code
Issues
15
Pull requests
3
Actions
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Security and quality
Insights
Actions: nodejs/security-wg
Actions
All workflows
Workflows
Close stale issues
Close stale issues
CodeQL
CodeQL
Dependency Graph
Dependency Graph
Dependency Review
Dependency Review
Generate VEX document
Generate VEX document
Node.js CI
Node.js CI
OpenSSF Scoring
OpenSSF Scoring
Scorecard supply-chain security
Scorecard supply-chain security
Update core index.json
Update core index.json
Update deps index.json
Update deps index.json
Show more workflows...
Management
Caches
Node.js CI
Node.js CI
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
test.yml
will be ignored since log searching is not yet available
74 workflow runs
74 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
docs: add README documentation security checklist (#1560)
Node.js CI
#786:
Pull request
#1579
opened by
felipeofdev-ai
Action required
felipeofdev-ai:docs/readme-security-checklist-1560
felipeofdev-ai:docs/readme-security-checklist-1560
Action required
View #1579
View workflow file
Update CII-Best-Practices for Nodejs: Silver level
Node.js CI
#785:
Pull request
#1306
reopened by
ljharb
23s
UlisesGascon:docs/update-best-practices-silver
UlisesGascon:docs/update-best-practices-silver
23s
View #1306
View workflow file
docs: add issue link for OpenJS CNA Initiative (#1577)
Node.js CI
#784:
Commit
3ec919f
pushed by
RafaelGSS
22s
main
main
22s
View workflow file
regenerate node.openvex.json
Node.js CI
#783:
Pull request
#1574
synchronize by
github-actions
Bot
24s
regenerate-vex
regenerate-vex
24s
View #1574
View workflow file
fix: correct the node.js purl (#1551)
Node.js CI
#782:
Commit
5188040
pushed by
RafaelGSS
19s
main
main
19s
View workflow file
fix: correct the node.js purl
Node.js CI
#781:
Pull request
#1551
synchronize by
marco-ippolito
21s
correct-namespace
correct-namespace
21s
View #1551
View workflow file
docs: add issue link for OpenJS CNA Initiative
Node.js CI
#780:
Pull request
#1577
opened by
UlisesGascon
20s
ulises-udpate-initiative
ulises-udpate-initiative
20s
View #1577
View workflow file
docs: add initiative adopt OpenJS CNA for CVE Operations (#1570)
Node.js CI
#779:
Commit
ef422eb
pushed by
UlisesGascon
19s
main
main
19s
View workflow file
vex: regenerate node.openvex.json (#1573)
Node.js CI
#777:
Commit
c5ae295
pushed by
marco-ippolito
22s
main
main
22s
View workflow file
regenerate node.openvex.json
Node.js CI
#776:
Pull request
#1573
opened by
github-actions
Bot
21s
regenerate-vex
regenerate-vex
21s
View #1573
View workflow file
regenerate node.openvex.json (#1562)
Node.js CI
#775:
Commit
c2afc64
pushed by
RafaelGSS
23s
main
main
23s
View workflow file
vuln: update core index.json (#1572)
Node.js CI
#774:
Commit
74b9e4b
pushed by
RafaelGSS
24s
main
main
24s
View workflow file
regenerate node.openvex.json
Node.js CI
#773:
Pull request
#1562
synchronize by
github-actions
Bot
27s
regenerate-vex
regenerate-vex
27s
View #1562
View workflow file
update core index.json
Node.js CI
#772:
Pull request
#1572
opened by
github-actions
Bot
20s
core-index-updated
core-index-updated
20s
View #1572
View workflow file
Sync security vulnerabilities (#1571)
Node.js CI
#771:
Commit
5d92e3e
pushed by
RafaelGSS
19s
main
main
19s
View workflow file
Node.js Vulnerabilities Sync
Node.js CI
#770:
Pull request
#1571
opened by
nodejs-github-bot
30s
sync-vulnerabilities
sync-vulnerabilities
30s
View #1571
View workflow file
docs: add initiative adopt OpenJS CNA for CVE Operations
Node.js CI
#769:
Pull request
#1570
opened by
UlisesGascon
26s
openjs-cna-adoption-initiative
openjs-cna-adoption-initiative
26s
View #1570
View workflow file
regenerate node.openvex.json (#1549)
Node.js CI
#767:
Commit
f1288d0
pushed by
marco-ippolito
24s
main
main
24s
View workflow file
vuln: update core index.json (#1561)
Node.js CI
#766:
Commit
23a0b94
pushed by
RafaelGSS
32s
main
main
32s
View workflow file
Sync security vulnerabilities (#1559)
Node.js CI
#765:
Commit
2f8ec6b
pushed by
RafaelGSS
24s
main
main
24s
View workflow file
Node.js Vulnerabilities Sync
Node.js CI
#764:
Pull request
#1559
opened by
nodejs-github-bot
20s
sync-vulnerabilities
sync-vulnerabilities
20s
View #1559
View workflow file
Add minutes for Node.js Security team meeting on 2026-03-19 (#1557)
Node.js CI
#763:
Commit
750a7ba
pushed by
RafaelGSS
23s
main
main
23s
View workflow file
doc: minutes for Node.js Security team meeting on 2026-03-19
Node.js CI
#762:
Pull request
#1557
opened by
RafaelGSS
20s
add-meeting-notes-190326
add-meeting-notes-190326
20s
View #1557
View workflow file
vuln: update deps index.json (#1547)
Node.js CI
#761:
Commit
c55e1c1
pushed by
RafaelGSS
20s
main
main
20s
View workflow file
fix: correct the node.js purl
Node.js CI
#760:
Pull request
#1551
opened by
marco-ippolito
24s
correct-namespace
correct-namespace
24s
View #1551
View workflow file
Previous
1
2
3
Next
You can’t perform that action at this time.