Merge pull request #63 from KarolinHem/main

Updated Security policy, added Issue templates

.github/ISSUE_TEMPLATE/bug-report.md

@@ -0,0 +1,45 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: "[BUG]"
+labels: bug
+assignees: ''
+
+---
+
+**Describe the Bug**
+
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected Behavior**
+
+A clear and concise description of what you expected to happen.
+
+**Screenshots and Logs**
+
+If applicable, add screenshots and logs to help explain your problem.
+
+**Product Deployment** 
+
+Please complete the following information:
+ - Deployment format: [e.g. software, container]
+ - Version [e.g. 8.0.0]
+
+**Desktop**
+
+Please complete the following information:
+ - OS: [e.g. iOS]
+ - Browser [e.g. chrome, safari]
+ - Version [e.g. 22]
+
+**Additional Context**
+
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: GitHub Discussions
+    url: https://github.com/Keyfactor/signserver-ce/discussions
+    about: Join in-depth discussions or ask questions

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,25 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Is your feature request related to a problem or specific use case? Please describe.**
+A clear and concise description of the problem or use case. 
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Product deployment**
+Please complete the following information:
+ - Deployment format: [e.g. software, container]
+ - Version [e.g. 8.0.0]
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

CONTRIBUTING.md

@@ -4,7 +4,7 @@ Thank you for contributing to SignServer!
 
 In this guide, you get an overview of the contribution workflow from starting a discussion or opening an issue, to creating, reviewing, and merging a pull request.
 
-For an overview of the project, see [README](README-CE.md). 
+For an overview of the project, see [README](README.md). 
 
 ### Start a discussion
 If you have a question or problem, you can [search in discussions](../../discussions), if someone has already found a solution to your problem. 

README.md

@@ -19,7 +19,7 @@ You can also easily run SignServer as a container from **[Docker Hub](https://hu
 In our Community we welcome contributions. The Community software is open source and community supported, there is no support SLA, but a helpful best-effort Community.
 
 * To report a problem or suggest a new feature, use the **[Issues](../../issues)** tab. 
-* If you want to contribute actual bug fixes or proposed enhancements, use the **[Pull requests](../../pulls)** tab.
+* If you want to contribute to the project, see our **[Contributing guidelines](CONTRIBUTING.md)**.
 * Ask the community for ideas: **[SignServer Discussions](https://github.com/Keyfactor/signserver-ce/discussions)**.  
 * Read more in our documentation: **[SignServer Documentation](https://doc.primekey.com/signserver)**.
 * See release information: **[SignServer Release Information](https://doc.primekey.com/signserver/signserver-release-information)**. 

SECURITY.md

@@ -1,8 +1,14 @@
 # Security Policy
 
 ## Reporting a Vulnerability
+If you think that you have found a security vulnerability, please report it to this email address: [security@primekey.com](mailto:security@primekey.com)
 
-If you think that you have found a security vulnerability in SignServer, please report it to this email address:
-security@primekey.com
+Describe the issue including all details, for example: 
+* Short summary of the problem
+* Steps to reproduce
+* Affected product versions
+* Logs if available 
 
-If you want to encrypt email traffic, see the keys page on https://www.signserver.org/signserver-keys/ for our PGP key.
+The Keyfactor team will send a response indicating the next steps in handling your report. You may be asked to provide additional information or guidance. 
+
+If the issue is confirmed as a vulnerability, we will open a Security Advisory and acknowledge your contributions as part of it. Optionally, you can have your name and contact information listed on the [Contributors](https://www.signserver.org/contributors/) page.