From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.groups.io (mail02.groups.io [66.175.222.108]) by spool.mail.gandi.net (Postfix) with ESMTPS id BE82DAC0D9B for ; Wed, 3 Apr 2024 16:58:54 +0000 (UTC) DKIM-Signature: a=rsa-sha256; bh=GcxOk4/U+pNBHdQoHRUC+pSSikdeZt3qs4roCsYqlL8=; c=relaxed/simple; d=groups.io; h=From:To:CC:Subject:Thread-Topic:Thread-Index:Date:Message-ID:Accept-Language:MIME-Version:Precedence:List-Subscribe:List-Help:Sender:List-Id:Mailing-List:Delivered-To:Resent-Date:Resent-From:Reply-To:List-Unsubscribe-Post:List-Unsubscribe:Content-Language:Content-Type; s=20240206; t=1712163533; v=1; b=Egfqfo5aLMg3GEWhA5FXi6HG2wS+ODBcOoxgO1Gfbjj4HTlYfdewUcK5VE0YOBhG+lZA25Al NWyWzC1MOt6IhhnPKno12jvylo8pkfIiAuxnNakx5h1/cxh+LDpzh2Z9UlhMDkULgwjz5J+nnp8 6PXe7nQUUujpk+KdFiYuAkIhmZ/j8lxPZ+bNhJQtvhI3CzuM303GGt2eTfEaIxM45gs5mUvAR+Y b/7ZFnWtQnGU86PPEKIGK77eZ9JHQwav8cTGwJSXCe47vUQPKy/0xWiSQdW+wienerpT6UqOA5c NF3n9RSuDGMxncVII8QQ07dUq9pIwiURWpYw80VUDa1vQ== X-Received: by 127.0.0.2 with SMTP id 9k0iYY7687511xnz0ssOSUoA; Wed, 03 Apr 2024 09:58:53 -0700 X-Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.21]) by mx.groups.io with SMTP id smtpd.web11.16891.1712163532611886027 for ; Wed, 03 Apr 2024 09:58:52 -0700 X-CSE-ConnectionGUID: XPErRC4yRUibKOnNhlNWkw== X-CSE-MsgGUID: 7euKUjbvQ/G+jiWo28uJjw== X-IronPort-AV: E=McAfee;i="6600,9927,11033"; a="7333040" X-IronPort-AV: E=Sophos;i="6.07,177,1708416000"; d="scan'208,217";a="7333040" X-Received: from orviesa007.jf.intel.com ([10.64.159.147]) by orvoesa113.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 03 Apr 2024 09:58:52 -0700 X-CSE-ConnectionGUID: G1oOXmrxSVuJSr7tOKXD4w== X-CSE-MsgGUID: KKZB/92wQx2o6YTABycDgA== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.07,177,1708416000"; d="scan'208,217";a="18921497" X-Received: from fmsmsx601.amr.corp.intel.com ([10.18.126.81]) by orviesa007.jf.intel.com with ESMTP/TLS/AES256-GCM-SHA384; 03 Apr 2024 09:58:51 -0700 X-Received: from fmsmsx612.amr.corp.intel.com (10.18.126.92) by fmsmsx601.amr.corp.intel.com (10.18.126.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.35; Wed, 3 Apr 2024 09:58:50 -0700 X-Received: from fmsmsx612.amr.corp.intel.com (10.18.126.92) by fmsmsx612.amr.corp.intel.com (10.18.126.92) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.35; Wed, 3 Apr 2024 09:58:49 -0700 X-Received: from fmsedg601.ED.cps.intel.com (10.1.192.135) by fmsmsx612.amr.corp.intel.com (10.18.126.92) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.35 via Frontend Transport; Wed, 3 Apr 2024 09:58:49 -0700 X-Received: from NAM12-DM6-obe.outbound.protection.outlook.com (104.47.59.168) by edgegateway.intel.com (192.55.55.70) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.35; Wed, 3 Apr 2024 09:58:49 -0700 X-Received: from SN7PR11MB6969.namprd11.prod.outlook.com (2603:10b6:806:2a9::20) by SA1PR11MB5900.namprd11.prod.outlook.com (2603:10b6:806:238::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7452.26; Wed, 3 Apr 2024 16:58:41 +0000 X-Received: from SN7PR11MB6969.namprd11.prod.outlook.com ([fe80::e836:6440:82bd:a4d2]) by SN7PR11MB6969.namprd11.prod.outlook.com ([fe80::e836:6440:82bd:a4d2%3]) with mapi id 15.20.7452.019; Wed, 3 Apr 2024 16:58:41 +0000 From: "Zimmer, Vincent" To: "devel@edk2.groups.io" CC: "infosec@edk2.groups.io" Subject: [edk2-devel] RFC - Tianocore infosec process Thread-Topic: RFC - Tianocore infosec process Thread-Index: AdqF59uTbI5tKnRWTOi8jjhFOXsv8w== Date: Wed, 3 Apr 2024 16:58:41 +0000 Message-ID: Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: SN7PR11MB6969:EE_|SA1PR11MB5900:EE_ x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?x6ngzMnQAr+P/rMgU+2Hf+rd+qJ8x4EL4GgZU9G8+ri+AUV37ufekK4sVIRr?= =?us-ascii?Q?XISmrQcNKThSdwSWEfGZS3Yh93inMGbp+4eHnfygoihV4/4yRjJfWpCeercr?= =?us-ascii?Q?WJHK27/hdL8qlyhC3AIlHhoLI3+46HVuvxP1lCRudA5+qiqXtiJmtVR5C0aA?= =?us-ascii?Q?j5/rTCJjhsqI/D33gQ7teVOES6DhVknl39aUJTjewMDG8Ahp+RREdF5ZUjpc?= =?us-ascii?Q?veBGWey2XLkwS0tDEc2YWLHvnzdq8xgTJlv2RF+Xu5nVn851LveeV00bQw/o?= =?us-ascii?Q?f4Khq6yUHSKWObHUxCfRnk7usR12UXcHQ+p9hPHwb6Lq2J5n/cRa0X3rSARu?= =?us-ascii?Q?Ewr43J19xbVAKwjVnzduBhAtG+PvHdi+2Bc0fyoR9ZVMrj3xoeCXo7FpDdec?= =?us-ascii?Q?W2+3gjYC0/g2eIDNHxNNEc4AzwXjHiB1q8LpMBtnyxlZS+Mkn2py/YBwpAuo?= =?us-ascii?Q?NU7N5ino65sgk2WVDm+cb3xFlRP+O4Qrp1nkaUBLSPcKJPZYBYCpEvvwW/Xt?= =?us-ascii?Q?jVX8eeamewqqVP8+vQ5gQAs9VA39QR9cB8dJ/sGJOdLCZzfeCU2gYN+VRNEZ?= =?us-ascii?Q?yzLydg194tsOhiEJkvkX2SLnZLXhQ2UHtwLOzFlNuR6a/DCSWgMPFLej2y9X?= =?us-ascii?Q?+njDVXcFnq674KnhahojcP3sfgtgY2SRQmf/Guz/gMcyAytXaPY6RjbOUJqk?= =?us-ascii?Q?X3DNZqICwrl8a6yNJVyiwaCkY830SokujrjbpdelTDIgRGbMnOJum1303T+E?= =?us-ascii?Q?sk32T4ZJKy13HY8tY7QORy9+Qt6PvmuO9DMCi1nX23pzRPB5kJvdkpZ2vToT?= =?us-ascii?Q?CbnSXR9tTcRePNQMApprWL4aXkdjX1ZsBHFAa5p84QU1xMIHg0YKA2h6hrmd?= =?us-ascii?Q?9BcTWH+Oeq3dex4fAYzmzSPw6IdUBMRg66rq2ZftBvf5V4DHToZaLTeGxU58?= =?us-ascii?Q?aTWLj/5E8JzKuTnzc00uDasheu69GTmocTnmh7qEQ9BxWmzlQRRvoPlCIB2K?= =?us-ascii?Q?vV159OIi9zPTStdqLdTXQDyqq5n8vOUa3FVPicU83TCi9iNnHRNPXgguBMMc?= =?us-ascii?Q?Ahsy5zUWf4740wR6yl74qRLOZuDJT72MsOic5YP/5KnmjKx1QblXleVJdvtS?= =?us-ascii?Q?3xfhm+M3OYJ/GnoZB/WNTpF1Xiv4Smkz4D4Oof1oBuRwxVx1nCSkQJr9w4ki?= =?us-ascii?Q?HhTaem3SeILClgbtax4B7v+vAvtEjZzaJCHQ2KUpmXBcCGBjxQFQY7F6oscm?= =?us-ascii?Q?XSYqtmwa0HkYzy8WmaXOiThxAGXBjAehSBfPZaq7gcxBuZrt9nzVU8m0yGbi?= =?us-ascii?Q?aSavnmWCR0gkMUaaSkKKHvQrf1FKlwecdWnacAHVrLdW5+jYd7gdrFpQLaSI?= =?us-ascii?Q?MBlGZ/u6TRphAl0KBGCK6hMLc5wDrbzuE23ZYpNqGEVWFqtvSbnJb2TBq5At?= =?us-ascii?Q?zr5TdVtwdZJK0rbOw9aQ1mprdRi1Fs29y8wxjfDyn3FD/8OvIfH5Ap+jhqOs?= =?us-ascii?Q?ZYBLd739XcsNXnw9gaTLsLvyhVa78IMAEL5kXeFxNbJ5HDSWV9AdZgRbEdOc?= =?us-ascii?Q?GsCWYxZ9L79Th7pCE6i2TCSm8R2BXYf5XWPKi74f?= MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SN7PR11MB6969.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6ecf6e62-f80b-4f6b-f9ab-08dc53ff507d X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Apr 2024 16:58:41.1384 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: QL7R5KYxlG1O7tPVD6TLGfFviouwlnzODhx/JXMb7/KP8/ycRjw3Ju9X+XXtZCx6qmLicT2EVB7MlOhsG3/6PLUvzMi8irrfd8GOXoUf8y0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR11MB5900 X-OriginatorOrg: intel.com Precedence: Bulk List-Subscribe: List-Help: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Resent-Date: Wed, 03 Apr 2024 09:58:52 -0700 Resent-From: vincent.zimmer@intel.com Reply-To: devel@edk2.groups.io,vincent.zimmer@intel.com List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: X-Gm-Message-State: 40H1jdaQMRbsGLjF07QgplW1x7686176AA= Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_SN7PR11MB6969742533F5D39CE5BF272B883D2SN7PR11MB6969namp_" X-GND-Status: LEGIT Authentication-Results: spool.mail.gandi.net; dkim=pass header.d=groups.io header.s=20240206 header.b=Egfqfo5a; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=intel.com (policy=none); spf=pass (spool.mail.gandi.net: domain of bounce@groups.io designates 66.175.222.108 as permitted sender) smtp.mailfrom=bounce@groups.io --_000_SN7PR11MB6969742533F5D39CE5BF272B883D2SN7PR11MB6969namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello The infosec team in Tianocore request feedback on the proposed process for = handling security issues described in https://github.com/tianocore/tianoco= re.github.io/wiki/GHSA-GitHub-Security-Advisories-Proceess-(Draft) We'd like to make this active after the May stable so feedback by April 15,= 2024 would be appreciated. Thanks infosec -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#117374): https://edk2.groups.io/g/devel/message/117374 Mute This Topic: https://groups.io/mt/105312951/7686176 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io] -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D- --_000_SN7PR11MB6969742533F5D39CE5BF272B883D2SN7PR11MB6969namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello

 

The infosec team in Tianocore request feedback on th= e proposed process for handling security issues described in  https://github.com/tianocore/tianocore.github.io/wiki/GHSA-GitHub-Security-= Advisories-Proceess-(Draft)

 

We’d like to make this active after the May st= able so feedback by April 15, 2024 would be appreciated.

 

Thanks

 

infosec

_._,_._,_
Groups.io Links:

=20 You receive all messages sent to this group. =20 =20

View/Reply Online (#117374) | =20 | Mute= This Topic | New Topic
Your Subscriptio= n | Contact Group Owner | Unsubscribe [rebecca@openfw.io]

_._,_._,_
--_000_SN7PR11MB6969742533F5D39CE5BF272B883D2SN7PR11MB6969namp_--