I also just noticed on the CHIPSEC web site that they list some Google Groups for their project:
https://groups.google.com/forum/#!forum/chipsec-users
https://groups.google.com/forum/#!forum/chipsec-dev
The CHIPSEC team already has a CHIPSEC mailing list hosted on 01.org that they basically do not use (Twitter is the preferred communication of CHIPSEC team).