Merge pull request #341 from heroku/jh/repo-maintenance

Jh/repo maintenance

.github/dependabot.yml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+ - package-ecosystem: "bundler"
+ directory: "/"
+ schedule:
+ interval: "weekly"

CODEOWNERS

@@ -1,2 +1,7 @@
 # Comment line immediately above ownership line is reserved for related gus information. Please be careful while editing.
+# Each line is a file pattern followed by one or more owners.
+
+# These owners will be the default owners for everything in the repo.
+* @heroku/marketing-web-ops
+* @heroku/front-end
 #ECCN:Open Source

CONTRIBUTING.md

@@ -0,0 +1,14 @@
+# Contributing
+
+## Reporting a bug
+
+If internal to Salesforce/Heroku, please contact the #marketing-web-ops team on Slack.
+
+## General Contribution Guidelines
+
+* Create a topic branch off the tip of main.
+* Commit in logical units.
+* Check for whitespace with `git --diff` before committing.
+* Make sure tests are still passing.
+* Push your changes to a topic branch in the GitHub repository.
+* Submit a pull request to main.

SECURITY.md

@@ -0,0 +1,7 @@
+## Security
+
+Please report any security issue to [[email protected]](mailto:[email protected])
+as soon as it is discovered. This library limits its runtime dependencies in
+order to reduce the total cost of ownership as much as can be, but all consumers
+should remain vigilant and have their security stakeholders review all third-party
+products (3PP) like this one and their dependencies.