add security incident response process

[cartersocha]

add security incident response process to website - copying over from sig-security

[cartersocha]

@svrnm I can remove the javascript files. That formatter did those changes automatically

[chalin]

@svrnm I can remove the javascript files. That formatter did those changes automatically

@cartersocha - hmm, you must have a custom setup or custom config for Pettier, or maybe you're not using the right version? Maybe try running npm install to ensure that you're using the expected version of Prettier. But yes, all other changes should be removed -- otherwise FILE FORMAT will continue to fail.

[svrnm]

thanks @cartersocha, I focused on the final that needs the review. Let me know if you need any help to get the unintended changes fixed.

[cartersocha]

Fix everything. Thanks for the feedback and suggestions @svrnm @chalin. Should be ready to go

[svrnm]

Fix everything. Thanks for the feedback and suggestions @svrnm @chalin. Should be ready to go

Thanks!

Can a second person from @open-telemetry/sig-security-maintainers approve the PR as well? Then we can merge it.

[jpkrohling]

Just a small suggestion to make it explicit which team to ping.

[cartermp]

@cartersocha this looks good overall. If you can address the bits from @jpkrohling then I think we can merge this.

updated

[cartersocha]

done @cartermp