Security Issue Response Team Work Charter

English | 简体中文

The Security Issue Response Team (referred to as "Team" hereinafter) is set up to ensure timely response to and handling of security issues.

Responsibilities

• External vulnerability awareness.

  Measures such as proactive vulnerability crawling and vulnerability monitoring are taken to detect security issues in a timely manner.

• Assist in fixing vulnerabilities.

  Ensure that known vulnerabilities are fixed in a timely manner, to protect users' systems against attacks.

• Handle security issues.

  Respond to security issues reported, track the issue handling progress, and disclose security issues in the community regularly.

• Participate in code review.

  Discover vulnerabilities in code through code review.

• Review the bonus given or withdrawn based on the Bug Bounty Program.

• Update the vulnerability review records and the list of Acknowledgment.

Members

The Team consists of people from OpenHarmony A category donors who have extensive experience in related fields and are willing to work on security issues in the OpenHarmony community. Currently, the team members include:

• zhangadong（Leader）
• dengxiaolong（Deputy Leader）
• zhangyun
• peibibao
• yangna
• yansudan
• wangchen

The Team has a team leader and a deputy team leader, they are elected by team members for a two-year term and can be re-elected for more terms. The team members serve a two-year term and can be re-elected for more terms. New members are approved by existing members via an ordinary resolution. Dismissal of existing members is approved by a special resolution.

The team leader is responsible for the daily work of the Team. Members shall comply with this work charter and regulations of the OpenHarmony project and diligently fulfill their duties.

The Team has the right to recall members who violate the regulations.

Meetings

A quorum of more than half of the team members is required to attend the meeting. An ordinary resolution shall be approved by more than half of the attendees. A special resolution shall be approved by at least two thirds of all attendees.

A meeting can be held only when a majority of team members can attend the meeting. The team leader, deputy team leader, or more than three members can initiate a meeting based on work requirements.

A special resolution is required for the following issues:

• Modifying this work charter
• Recalling team members
• Reviewing the bonus given or withdrawn based on the Bug Bounty Program
• Other important issues

Contacts

Contact the Team using the following contact information:

Reporting Security Issues

You are welcome to report any potential security issue in the OpenHarmony community. For details, refer to OpenHarmony Bug Bounty Program.

Handling Security Vulnerabilities

The Team will assign specialists to track and handle security vulnerabilities. For more information, see OpenHarmony Security Vulnerability Governance.

Disclosing Security Vulnerabilities

For details about the disclosed security vulnerabilities in the OpenHarmony community, see Security Bulletins.

Private Distributors List

This list is used to provide security-related actionable information for OpenHarmony distributors. For details, see Private Distributors List.

Community Discussion and Support

Learn more about OpenHarmony and how to take part in security activities at OpenHarmony.

Acknowledgment

Learn about the individuals and teams that have contributed to the security of the OpenHarmony community at Acknowledgment.