(doc) Add security.md file

[gep13]

This addition, changes the following:

To this:

Which, once you click on it, show the policy, rather than starting to create a new issue:

We might want to expand on the content a little bit. For example, this is what @AdmiringWorm (who I am stealing the idea from) is using:

https://github.com/WormieCorp/.github/blob/master/.github/SECURITY.md

And also another example here:

https://github.com/standard/.github/blob/master/SECURITY.md

Thoughts?

[pauby]

I like the change. Makes it much clearer. One thought - It may be better to be at the top so people don't just stop at the first one they find that might match (likely raising a normal issue) rather than going through the whole list?

[gep13]

@pauby I actually thought the same. but from what I can see, I don't think we can control that 😢

[pauby]

@gep13 I thought we could. I think you can do it by naming the templates so they sit in alphabetical order you need - see https://github.com/chocolatey-community/chocolatey-package-requests/tree/master/.github/ISSUE_TEMPLATE

[gep13]

@pauby yes, but this file that I just added, sits outside the ISSUE_TEMPLATE folder. It is at the root of the .github folder.

[gep13]

So, it's not technically an issue template, since it appears elsewhere in the GitHub UI.

[gep13]

@ferventcoder as a side note, we have the often of moving these files (once we are happy with them) to a new .github folder within the chocolatey organisation, and they would be applied to all repositories under this Organisation.

[pauby]

@pauby yes, but this file that I just added, sits outside the ISSUE_TEMPLATE folder. It is at the root of the .github folder.

To be fair, I did not check that 😄

[adilio]

Looks good to me! Much clearer!

[AdmiringWorm]

I would also recommend adding a link to the security policy in the README.md (actually, github recommends it), as well as perhaps in the contribution guidelines.

[ferventcoder]

LGTM!