doc: add instructions for core vuln files

This commit adds instructions for adding machine-readable json files to the security-wg repo in the security release guide. PR-URL: #39220 Reviewed-By: James M Snell <[email protected]>
nodejs · Sep 4, 2021 · 8438e8b · 8438e8b
1 parent c3cfefc
commit 8438e8b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/doc/guides/security-release-process.md b/doc/guides/security-release-process.md
@@ -105,6 +105,10 @@ information described.
 * [ ] PR machine-readable JSON descriptions of the vulnerabilities to the
   [core](https://github.com/nodejs/security-wg/tree/HEAD/vuln/core)
   vulnerability DB. ***LINK TO PR***
+  * For each vulnerability add a `#.json` file, one can copy an existing
+    [json](https://github.com/nodejs/security-wg/blob/0d82062d917cb9ddab88f910559469b2b13812bf/vuln/core/78.json)
+    file, and increment the latest created file number and use that as the name
+    of the new file to be added. For example, `79.json`.
 
 * [ ] Close this issue