Merge pull request #160 from strongloop/chore/improve-issue-templates

chore: disable security issue reporting

.github/ISSUE_TEMPLATE/Security_vulnerability.md

@@ -1,20 +0,0 @@
----
-name: Security vulnerability
-about: Do not report security vulnerabilities using GitHub issues. Please send an email to `reachsl@us.ibm.com` instead.
-labels: security
-
----
-
-<!-- 🚨 STOP 🚨 STOP 🚨 STOP 🚨
-
-BE RESPONSIBLE WHEN REPORTING SECURITY VULNERABILITIES.
-USE A PRIVATE CHANNEL TO ALLOW THE VULNERABILITY TO BE
-FIXED BEFORE IT'S PUBLICIZED.
-
-Please send an email to `reachsl@us.ibm.com` with:
-
-- Description of the vulnerability.
-- Steps to reproduce the issue.
-- Possible solutions.
-
--->

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Report a security vulnerability
+    url: https://loopback.io/doc/en/contrib/Reporting-issues.html#security-issues
+    about: Do not report security vulnerabilities using GitHub issues. Please send an email to `reachsl@us.ibm.com` instead.
+  - name: Get help on StackOverflow
+    url: https://stackoverflow.com/tags/loopbackjs
+    about: Please ask and answer questions on StackOverflow.
+  - name: Join our mailing list
+    url: https://groups.google.com/forum/#!forum/loopbackjs
+    about: You can also post your question to our mailing list.