Blog: Add hackerone new policy

[RafaelGSS]

cc: @nodejs/tsc @nodejs/security-release

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
nodejs-org	Ready	Preview	Jan 21, 2026 2:07pm

[github-actions]

👋 Codeowner Review Request

The following codeowners have been identified for the changed files:

Team reviewers: @nodejs/releasers

Please review the changes when you have a chance. Thank you! 🙏

[Copilot]

Pull request overview

This PR adds a blog post announcing a new policy requiring HackerOne Signal score of 1.0 or higher for submitting vulnerability reports to the Node.js project. The policy aims to reduce the burden of low-quality reports on the security team.

Changes:

• New blog post announcing HackerOne Signal requirement for vulnerability submissions
• Explains rationale (increase in low-quality reports) and alternative contact methods for researchers below the threshold

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.01%. Comparing base (46e0f2b) to head (68e6d6c).
⚠️ Report is 3 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #8559   +/-   ##
=======================================
  Coverage   75.01%   75.01%           
=======================================
  Files         103      103           
  Lines        9036     9037    +1     
  Branches      311      311           
=======================================
+ Hits         6778     6779    +1     
  Misses       2256     2256           
  Partials        2        2           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

Lighthouse Results

URL	Performance	Accessibility	Best Practices	SEO	Report
/en	🟢 99	🟢 96	🟢 100	🟢 100	🔗
/en/about	🟢 100	🟢 97	🟢 100	🟠 88	🔗
/en/about/previous-releases	🟢 98	🟢 100	🟢 100	🟢 100	🔗
/en/download	🟢 98	🟢 100	🟢 100	🟢 100	🔗
/en/download/archive/current	🟢 99	🟢 100	🟢 96	🟢 100	🔗
/en/blog	🟢 100	🟢 100	🟢 96	🟢 100	🔗

[github-actions]

📦 Build Size Comparison

Summary

Metric	Value
Old Total Size	3.74 MB
New Total Size	3.74 MB
Delta	243.00 B (+0.01%)

Changes

➕ Added Assets (1)

Name	Size
.next/static/chunks/d10793e1cd3f5cc9.js	205.74 KB

➖ Removed Assets (1)

Name	Size
.next/static/chunks/a7e5710a8b3c21a4.js	205.50 KB

[RafaelGSS]

Let's just make sure @mcollina checks it before landing

[mcollina]

lgtm