Security policy

[tisonkun]

• This supersedes Update reporting a vulnerability documentation #21.
• This closes [Doc] Move Security Policy and Supported Versions to an appropriate category in the website pulsar#18103.

[tisonkun]

Redirections verified locally:

cd site2/website-next
./preview.sh 2.10.x
docker-compose up
# open http://localhost/docs/security-policy-and-supported-versions

[momo-jun]

LGTM

[tisonkun]

Merging...

FWIW this follows the pattern https://flink.apache.org/security.html.

We may later review that navbar to add a link to this page and improve its visibility.

[tisonkun]

To avoid conflict with apache/pulsar#19090

[michaeljmarshall]

Thank you for pushing this initiative along, @tisonkun!

[michaeljmarshall]

@tisonkun - one question is what points to https://pulsar.apache.org/security/? I am not finding a reference on https://pulsar.apache.org/, maybe I am missing it.

[tisonkun]

@michaeljmarshall There's currently no and it was absent previously also.

For this point, I also think that the visibility of use cases and ecosystem deserves a higher level, as well as the security page. Thus, we may do some refactoring on the navbar. But I don't find time to give a proposal yet.

cc @DaveDuggins @jak78 @asafm

[michaeljmarshall]

Sounds good. The previous location wasn't ideal either, since it was in the versioned docs section. Do we have an issue to track the larger refactoring?

[tisonkun]

@michaeljmarshall Not yet. My thoughts are a bit scattered now. Perhaps I can spend some time after apache/pulsar#19064 delivered. But you're welcome to list out your thoughts :)

[michaeljmarshall]

I added a bullet to apache/pulsar#19064. Hopefully that's okay.

[tisonkun]

That should be fine, lol.