Skip to content

Commit ca4d437

Browse files
authored
doc: add nodejs.org to resource list (#1435)
1 parent e5c1583 commit ca4d437

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

MAINTAINERS_THREAT_MODEL.md

+5-1
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,7 @@ repositories in the org, like Working groups or subteams.
4242
| **nodejs/build** (GH) | r | rrr | rrw | awa | rrr | wr | r |
4343
| **nodejs/docker-node** (GH) | r | rrr | rrr | awa | rrr | wr | w |
4444
| **nodejs/node-core-utils** | r | rrr | rrw | awa | rrr | wr | r |
45+
| **nodejs/nodejs.org** | r | rrr | rrr | awa | rrr | wr | r |
4546
| **npm account** | - | - | -a- | a-\- | -\-\- | -\- | - |
4647
| **Jenkins CI - test** | r | ww- | wwa | -w²- | -\-\- | ww | - |
4748
| **Jenkins CI - release** | - | -\-\- | -ww | -w- | -\-\- | -\- | - |
@@ -87,6 +88,7 @@ or inderictly (builds process/testing)
8788
| **nodejs/deps¹** | Write | If you have write access to Node.js dependencies you can hide malicious code and publish a new version, eventually the automation will create a PR to sync to nodejs/core and this code might pass without supervision |
8889
| **nodejs/build** (GH) | - | N\A |
8990
| **nodejs/node-core-utils** | Write | User must have _Write_ access to nodejs/node to open a attack vector|
91+
| **nodejs/nodejs.org** | - | N\A |
9092
| **npm account** | Write | Because you can change the node-core-utils/branch-diff code to inject malicious code |
9193
| **Jenkins CI - test** | - | N\A |
9294
| **Jenkins CI - release** | - | N\A |
@@ -139,6 +141,7 @@ scripts, pollute plugins, overwrite configuration...)
139141
| **nodejs/build** (GH) | w | write access would allow key scripts, infra to be modified |
140142
| **nodejs/docker-node** | - | - |
141143
| **nodejs/node-core-utils** | w | N\A |
144+
| **nodejs/nodejs.org** | - | N\A |
142145
| **npm account** | - | N\A |
143146
| **Jenkins CI - test** | - | N\A |
144147
| **Jenkins CI - release** | w | access to jenkins used for build would allow swapping published binaries |
@@ -171,7 +174,8 @@ Notes:
171174
| **nodejs/build** (GH) | - | N\A |
172175
| **nodejs/unofficial-builds** (GH) | w | write access would allow key scripts, infra to be modified |
173176
| **nodejs/docker-node** | w | modification of Docker files can modify what node.js binaries are in the images
174-
| **nodejs/node-core-utils** | - | N\A |
177+
| **nodejs/node-core-utils** | - | N\A |
178+
| **nodejs/nodejs.org** | - | N\A |
175179
| **npm account** | - | N\A |
176180
| **Jenkins CI - test** | - | N\A |
177181
| **Jenkins CI - release** | - | N\A |

0 commit comments

Comments
 (0)