Clean Master Privacy

[gamestime102]

I wanted to announce that we, as gamestime102, want to take on the security of the carbon language.

[gamestime102-tv]

What are your thoughts on this topic? @gamestime102-tv

[jonmeow]

If you'd like to contribute to Carbon, please see the CONTRIBUTING.md. I see on #4803 and #4806 that you haven't signed the CLA, which we unfortunately do need to ask for since it's important to the project's licensing (if you're curious, there's some more detail in the FAQ). Carbon's licensing is important to us, and the CLA is part of how we license the toolchain under the Apache License v2.0 with LLVM Exceptions.

That said, I'm not sure what you mean by taking on security; there are many various security-related facets. If you mean "on GitHub", we do already have long-term contributors who are handling any project security issues that come up, so we're not looking for owners right now. However, we're doing a bit of the OpenSSF scorecard and there may be spots to improve there. If you mean "in code", we're really focused on the toolchain right now -- we keep a task list for work.

Let me know if I've completely misunderstood, or if there's other information that would be helpful. However, please do bear in mind that we require a signed CLA, including for design discussion.