doc: add instructions for core vuln files

This commit adds instructions for adding machine-readable json files to the security-wg repo in the security release guide. PR-URL: nodejs#39220 Reviewed-By: James M Snell <[email protected]>
jyxinye · Jul 16, 2021 · eb33cb4 · eb33cb4
1 parent 0d42470
commit eb33cb4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/doc/guides/security-release-process.md b/doc/guides/security-release-process.md
@@ -100,6 +100,10 @@ information described.
 * [ ] PR machine-readable JSON descriptions of the vulnerabilities to the
   [core](https://github.com/nodejs/security-wg/tree/HEAD/vuln/core)
   vulnerability DB. ***LINK TO PR***
+  * For each vulnerability add a `#.json` file, one can copy an existing
+    [json](https://github.com/nodejs/security-wg/blob/0d82062d917cb9ddab88f910559469b2b13812bf/vuln/core/78.json)
+    file, and increment the latest created file number and use that as the name
+    of the new file to be added. For example, `79.json`.
 
 * [ ] Close this issue