Merge pull request #3804 from AkihiroSuda/fix-3796

docs: clarify how to report issues

Author: jandubois

website/content/en/docs/community/contributing.md

@@ -3,29 +3,39 @@ title: Contributing
 weight: 20
 ---
 
-## Developer Certificate of Origin
+## Reporting issues
+
+Bugs and feature requests can be submitted via <https://github.com/lima-vm/lima/issues>.
+
+For asking questions, use [GitHub Discussions](https://github.com/lima-vm/lima/discussions) or [Slack (`#lima`)](https://slack.cncf.io).
+
+For reporting vulnerabilities, see <https://github.com/lima-vm/.github/blob/main/SECURITY.md>.
+
+## Contributing code
+
+### Developer Certificate of Origin
 
 Every commit must be signed off with the `Signed-off-by: REAL NAME <[email protected]>` line.
 
 Use the `git commit -s` command to add the Signed-off-by line.
 
 See also <https://github.com/cncf/foundation/blob/main/policies-guidance/dco-guidelines.md>.
 
-## Licensing
+### Licensing
 
 Lima is licensed under the terms of [Apache License, Version 2.0](https://github.com/lima-vm/lima/blob/master/LICENSE).
 
 See also <https://github.com/cncf/foundation/blob/main/policies-guidance/allowed-third-party-license-policy.md> for third-party dependencies.
 
-## Sending pull requests
+### Sending pull requests
 
 Pull requests can be submitted to <https://github.com/lima-vm/lima/pulls>.
 
 It is highly suggested to add [tests](../../dev/testing/) for every non-trivial pull requests.
 A test can be implemented as a unit test rather than an integration test when it is possible,
 to avoid slowing the integration test CI.
 
-## Merging pull requests
+### Merging pull requests
 
 [Committers](../governance) can merge pull requests.
 [Reviewers](../governance) can approve, but cannot merge, pull requests.