[OFBIZ-12833] Add a GH SECURITY.md page to framework and plugins branches

• Type: Improvement
• Status: Closed
• Priority: Trivial
• Resolution: Done
• Affects Version/s: 18.12.09, Upcoming Branch, 22.01.01
• Fix Version/s: 18.12.09, Upcoming Branch, 22.01.01
• Component/s: GitHub
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 24/Jun/23 10:10
• Updated: 24/Jun/23 12:49
• Resolved: 24/Jun/23 12:49

Description

After reading this [e-mail] thread: I decided to add, for now, a simple SECURITY.md, like in Apache Commons. We could get further and add a page like in Apache Groovy

There is though a small difference with Commons and Groovy, the pages to consider are
https://github.com/apache/ofbiz-framework/security/policy
https://github.com/apache/ofbiz-plugins/security/policy

I guess this is because we use Dependabot and CodeQL for JavaScript (only).