From bd4760ff62a1eaccae3c2b5fd7b31767a5fa2f3e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Miroslav=20Bajto=C5=A1?= <mbajtoss@gmail.com>
Date: Thu, 31 Oct 2019 16:33:49 +0100
Subject: [PATCH] chore: improve issue templates
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Disallow free-form issue creation, force users to pick
  Feature, Bug or Question
- Replace Security item with a link explaining how to disclose
  vulnerabilities via email
- Add links to StackOverflow and our mailing list

Signed-off-by: Miroslav Bajtoš <mbajtoss@gmail.com>
---
 .../ISSUE_TEMPLATE/Security_vulnerability.md  | 20 -------------------
 .github/ISSUE_TEMPLATE/config.yml             | 11 ++++++++++
 2 files changed, 11 insertions(+), 20 deletions(-)
 delete mode 100644 .github/ISSUE_TEMPLATE/Security_vulnerability.md
 create mode 100644 .github/ISSUE_TEMPLATE/config.yml

diff --git a/.github/ISSUE_TEMPLATE/Security_vulnerability.md b/.github/ISSUE_TEMPLATE/Security_vulnerability.md
deleted file mode 100644
index f82af3670878..000000000000
--- a/.github/ISSUE_TEMPLATE/Security_vulnerability.md
+++ /dev/null
@@ -1,20 +0,0 @@
----
-name: Security vulnerability
-about: Do not report security vulnerabilities using GitHub issues. Please send an email to `reachsl@us.ibm.com` instead.
-labels: security
-
----
-
-<!-- 🚨 STOP 🚨 STOP 🚨 STOP 🚨
-
-BE RESPONSIBLE WHEN REPORTING SECURITY VULNERABILITIES.
-USE A PRIVATE CHANNEL TO ALLOW THE VULNERABILITY TO BE
-FIXED BEFORE IT'S PUBLICIZED.
-
-Please send an email to `reachsl@us.ibm.com` with:
-
-- Description of the vulnerability.
-- Steps to reproduce the issue.
-- Possible solutions.
-
--->
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
new file mode 100644
index 000000000000..92047460cfee
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Report a security vulnerability
+    url: https://loopback.io/doc/en/contrib/Reporting-issues.html#security-issues
+    about: Do not report security vulnerabilities using GitHub issues. Please send an email to `reachsl@us.ibm.com` instead.
+  - name: Get help on StackOverflow
+    url: https://stackoverflow.com/tags/loopbackjs
+    about: Please ask and answer questions on StackOverflow.
+  - name: Join our mailing list
+    url: https://groups.google.com/forum/#!forum/loopbackjs
+    about: You can also post your question to our mailing list.