docs: add security and governance policies (#11)

* docs: fix readme links

* docs: remove legacy docs

* docs: add new policies

* docs: fix markdown lints

Author: ArwynFr

.github/CONTRIBUTING.md

@@ -22,6 +22,7 @@ and [submit a pull-request](https://github.com/ArwynFr/dotnet-integration-testin
 
 Merging a pull request requires:
 
+- dotnet test passes
 - dotnet format passes
 - dotnet roslynator analyze passes
 - dotnet oudated passes

.github/GOVERNANCE.md

@@ -0,0 +1,38 @@
+# Project governance policy
+
+## Roles
+
+### Maintainer
+
+The maintainer administrates the repository and is responsible for the overall
+health of the product.
+
+Persons in role: [ArwynFr](https://github.com/ArwynFr)
+
+### Moderators
+
+Moderators have multiple responsabilities:
+
+- They triage issues
+- They review pull-requests
+
+Persons in role: _none_
+
+### Contributors
+
+Contributors are people that write code of the library.
+This library accepts contributions from anyone, but contributons are screened
+by the moderators and the maintainer.
+
+[Persons in role](https://github.com/ArwynFr/dotnet-integration-testing/graphs/contributors)
+
+## Applications and departures
+
+The maintainer can discharge moderators:
+
+- After one month without contact
+- In case of policy violation
+
+The maintainer can appoint new moderators after discussion with other moderators.
+
+_This project is not currently appointing new moderators._

.github/README.md

@@ -3,10 +3,10 @@
 This library provides utility classes for writing integration tests in
 dotnet using `XUnit` and `WebApplicationFactory`.
 
-![Nuget.org](https://img.shields.io/nuget/v/ArwynFr.IntegrationTesting?style=for-the-badge)
-![Nuget.org](https://img.shields.io/nuget/dt/ArwynFr.IntegrationTesting?style=for-the-badge)
-![GitHub
-License](https://img.shields.io/github/license/ArwynFr/dotnet-integration-testing?style=for-the-badge)
+[![Nuget.org](https://img.shields.io/nuget/v/ArwynFr.IntegrationTesting?style=for-the-badge)](https://www.nuget.org/packages/ArwynFr.IntegrationTesting/)
+[![Nuget.org](https://img.shields.io/nuget/dt/ArwynFr.IntegrationTesting?style=for-the-badge)](https://www.nuget.org/packages/ArwynFr.IntegrationTesting/)
+[![GitHub
+License](https://img.shields.io/github/license/ArwynFr/dotnet-integration-testing?style=for-the-badge)](https://github.com/ArwynFr/dotnet-integration-testing#MIT-1-ov-file)
 
 ## Installation
 
@@ -15,7 +15,7 @@ License](https://img.shields.io/github/license/ArwynFr/dotnet-integration-testin
 ## Usage
 
 Read [advanced usage
-documentation](https://github.com/ArwynFr/dotnet-integration-testing/blob/main/.github/USAGE.adoc)
+documentation](https://github.com/ArwynFr/dotnet-integration-testing/blob/main/.github/USAGE.md)
 for further details.
 
 By default, the lib redirects the tested application logs to XUnit
@@ -80,6 +80,8 @@ TBD
 
 **Disclose vulnerability:**  
 Please [create a new security advisory on GitHub](https://github.com/ArwynFr/dotnet-integration-testing/security/advisories)
+\
+[Read our security policy](https://github.com/ArwynFr/dotnet-integration-testing/blob/main/.github/SECURITY.md)
 
 **Report malfunctions:**  
 [Please create a new issue on GitHub](https://github.com/ArwynFr/dotnet-integration-testing/issues/new/choose)
@@ -92,3 +94,8 @@ Please [fork the repository](https://github.com/ArwynFr/dotnet-integration-testi
 and [submit a pull-request](https://github.com/ArwynFr/dotnet-integration-testing/compare)
 \
 [Read our definition of done in contributing guidelines](https://github.com/ArwynFr/dotnet-integration-testing/blob/main/.github/CONTRIBUTING.md)
+
+**Moderate contributions:**  
+This project is not currently appointing new moderators.
+\
+[Read our governance policy](https://github.com/ArwynFr/dotnet-integration-testing/blob/main/.github/GOVERNANCE.md)

.github/SECURITY.md

@@ -0,0 +1,15 @@
+# Security policy
+
+## Supported version
+
+The latest version of the library is the only one suported.
+Please update to the latest version before reporting a vulnerability.
+
+## Bug bounties
+
+There is no bug bounty program in place in our organization.
+We will not deliver any bounty for reported bugs or vulnerabilities.
+
+## Report vulnerabilities
+
+Please [create a new security advisory on GitHub](https://github.com/ArwynFr/dotnet-integration-testing/security/advisories).

OSSMETADATA

@@ -0,0 +1 @@
+osslifecycle=active