Added CONTRIBUTING.md and SECURITY.md files in Connector/Python

Change-Id: If8352546a735208240540e6daa2ccf4f6e433716

Author: SubCoder1

CONTRIBUTING.md

@@ -196,7 +196,7 @@ Contributing
 ------------
 
 There are a few ways to contribute to the Connector/Python code. Please refer
-to the `contributing guidelines <CONTRIBUTING.rst>`_ for additional information.
+to the `contributing guidelines <CONTRIBUTING.md>`_ for additional information.
 
 
 License

CONTRIBUTING.rst

@@ -0,0 +1,30 @@
+# Reporting security vulnerabilities
+
+Oracle values the independent security research community and believes that
+responsible disclosure of security vulnerabilities helps us ensure the security
+and privacy of all our users.
+
+Please do NOT raise a GitHub Issue to report a security vulnerability. If you
+believe you have found a security vulnerability, please submit a report to
+[email protected] preferably with a proof of concept. Please review
+some additional information on how to report security vulnerabilities to Oracle
+(see https://www.oracle.com/corporate/security-practices/assurance/vulnerability/reporting.html)
+We encourage people who contact Oracle Security to use email encryption using
+our encryption key (see https://www.oracle.com/security-alerts/encryptionkey.html)
+
+We ask that you do not use other channels or contact the project maintainers
+directly.
+
+# Security updates, alerts and bulletins
+
+Security updates will be released on a regular cadence. Many of our projects
+will typically release security fixes in conjunction with the Oracle Critical Patch
+Update program. Additional information, including past advisories, is available on our
+security alerts page at https://www.oracle.com/security-alerts/
+
+# Security-related information
+
+We will provide security related information such as a threat model, considerations
+for secure use, or any known security issues in our documentation. Please note
+that labs and sample code are intended to demonstrate a concept and may not be
+sufficiently hardened for production use.

README.rst

@@ -1,7 +1,8 @@
 include README.txt
 include README.rst
 include LICENSE.txt
-include CONTRIBUTING.rst
+include CONTRIBUTING.md
+include SECURITY.md
 include CHANGES.txt
 include setup.py
 include unittests.py

SECURITY.md

@@ -200,7 +200,8 @@ def run(self):
             ("README.txt", "README.txt"),
             ("LICENSE.txt", "LICENSE.txt"),
             ("README.rst", "README.rst"),
-            ("CONTRIBUTING.rst", "CONTRIBUTING.rst"),
+            ("CONTRIBUTING.md", "CONTRIBUTING.md"),
+            ("SECURITY.md", "SECURITY.md"),
             ("docs/INFO_SRC", "INFO_SRC"),
             ("docs/INFO_BIN", "INFO_BIN"),
         ]

mysql-connector-python/MANIFEST.in

@@ -208,8 +208,12 @@ def _prepare_pkg_base(self, template_name, data_dir, root=""):
                 os.path.join(data_path, "README.rst"),
             ),
             (
-                os.path.join(cwd, "CONTRIBUTING.rst"),
-                os.path.join(data_path, "CONTRIBUTING.rst"),
+                os.path.join(cwd, "CONTRIBUTING.md"),
+                os.path.join(data_path, "CONTRIBUTING.md"),
+            ),
+            (
+                os.path.join(cwd, "SECURITY.md"),
+                os.path.join(data_path, "SECURITY.md"),
             ),
         ]
 

mysql-connector-python/cpydist/bdist.py

@@ -169,7 +169,7 @@ cd mysql-connector-python
 %{?scl:EOF}
 
 %files -n mysql-connector-python3%{?product_suffix}
-%doc LICENSE.txt CHANGES.txt README.txt README.rst CONTRIBUTING.rst mysql-connector-python/docs/INFO_SRC mysql-connector-python/docs/INFO_BIN
+%doc LICENSE.txt CHANGES.txt README.txt README.rst CONTRIBUTING.md SECURITY.md mysql-connector-python/docs/INFO_SRC mysql-connector-python/docs/INFO_BIN
 %{python3_sitearch}/mysql
 %{python3_sitearch}/mysql_connector_python-*.egg-info
 %{python3_sitearch}/_mysql_connector.cpython*.so

mysql-connector-python/cpydist/bdist_solaris.py

@@ -262,7 +262,8 @@ def run(self):
             ("README.txt", "README.txt"),
             ("LICENSE.txt", "LICENSE.txt"),
             ("README.rst", "README.rst"),
-            ("CONTRIBUTING.rst", "CONTRIBUTING.rst"),
+            ("CONTRIBUTING.md", "CONTRIBUTING.md"),
+            ("SECURITY.md", "SECURITY.md"),
             ("docs/INFO_SRC", "INFO_SRC"),
             ("docs/INFO_BIN", "INFO_BIN"),
         ]

mysql-connector-python/cpydist/data/rpm/mysql-connector-python.spec

@@ -53,7 +53,8 @@
     "README.rst",
     "LICENSE.txt",
     "CHANGES.txt",
-    "CONTRIBUTING.rst",
+    "CONTRIBUTING.md",
+    "SECURITY.md",
 )
 
 VERSION_TEXT = "999.0.0"