Merge pull request #1 from GradleUp/support-security

Add Support and Security metadata pages

SECURITY.md

@@ -0,0 +1,16 @@
+# Security Policy
+
+## Reporting Security Issues
+
+You can submit any security issue or suspected vulnerability
+on the GitHub Security pages of the project.
+Please do **NOT** use public GitHub Issues for reporting vulnerabilities.
+
+## Bug Bounty
+
+Unless documented explicitly,
+GradleUp projects are not a part of
+any security bug bounty program and,
+as of now, of any other program.
+
+For confirmed issues, we will be happy to credit you in the public Security Advisory and on social media.

SUPPORT.md

@@ -0,0 +1,44 @@
+# Support for GradleUp projects
+
+Any bug reports, feature requests and comments are welcome!
+The project keeps evolving,
+and any feedback from end users and developers will be appreciated.
+
+## Raising Issues and Feature Requests
+
+Use GitHub Issues.
+Note that it may take some time to get a response, thanks for your patience.
+Contributions are always welcome, see the Contributor Guidelines.
+
+## Reporting Security Issues
+
+Please do NOT use public GitHub Issues for reporting vulnerabilities.
+You can submit any security issue or suspected vulnerability on GitHub Security pages,
+which are available in project repositories.
+Read More - [Security Policy](./SECURITY.md).
+
+## Setting Expectations
+
+GradleUp is a community driven project,
+most of contributors and maintainers invest their personal time.
+We do not guarantee a response or resolution
+time for the submitted issues.
+As it is written in the Apache License v2:
+
+> Licensor provides the Work (and each Contributor provides its Contributions)
+> on an "AS IS" BASIS,
+> WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+> implied, including, without limitation, any warranties or conditions
+> of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+> PARTICULAR PURPOSE. You are solely responsible for determining the
+> appropriateness of using or redistributing the Work and assume any
+> risks associated with Your exercise of permissions under this License.
+
+## Commercial Support and Customization
+
+The GradleUp projects prioritize the community support with a best effort,
+but do not provide any guarantees or SLAs.
+Maintainers of the GradleUp projects **might** be available for additional consulting.
+Do not hesitate reaching out to them.
+
+**Protip:** Supporting the work of maintainers and contributors on GitHub Sponsors and other platforms is always appreciated.