reporting guidelines

[lsmith77]

semi-related to the topic of enforcement, I also wonder about the topic of reporting.

within the Symfony community we created this reporting guide which in turn was derived from those of the Stumptown Syndicate and the Django Software Foundation.

is the topic of reporting within the scope of 3.0?

(obviously in my dreams I would love to one day see Beacon as a way to partially enforce parts of these guidelines, especially about confidentiality, with a tool)

[CoralineAda]

Totally agree that this is an area where we should provide guidance, and I've made an note of that for the CC 3.0 working group. Thanks so much Lukas.

[AevaOnline]

I'd like to add another endorsement of refactoring the CC to include a process guideline, and a point of comparison.

Within the Kubernetes community, we recently published our incident report handling process

[CoralineAda]

@AevaOnline I like that a lot and will share it with the working group. Thanks!