Running hackerone-report-validation server

[RafaelGSS]

Hi folks,

As part of the security measurements we are doing with HackerOne, I wrote: https://github.com/nodejs/hackerone-report-validation that will be called via H1 Webhook and automatically close the reports that don't match our requirements (signal > 0).

Before making this server live, I would like to ask if there are any objections.

cc: @nodejs/tsc

[mcollina]

Where are you going to deploy it?

[RafaelGSS]

Not sure yet. I have some Hetzner machines, and I could also ask NodeSource to get one for me, but ideally, we should run that on any of our machines.

cc: @nodejs/build

[RafaelGSS]

Initially, to avoid wasting nodejs/build time on a MVP I could deploy that on my own machine and we keep that working for a month or two before moving it to any of Node.js machines. Wdyt?