Update documentation according to internal requirements

Author: spavlusieva

CONTRIBUTING.md

@@ -11,13 +11,12 @@ to the source code, examples, tests and documents.
 ### Sign the OCA
 
 Before you become a contributor, please read and sign
-[The Oracle Contributor Agreement](https://www.oracle.com/technetwork/community/oca-486395.html)
-(OCA), see [Contributing](https://github.com/oracle/nosql-go-sdk/blob/master/CONTRIBUTING.md)
+[Oracle Contributor Agreement][OCA](OCA),
+see [Contributing](https://github.com/oracle/nosql-go-sdk/blob/master/CONTRIBUTING.md)
 for more details.
 
 After you signed the OCA, make sure that your Git tool is configured to create
-commits using your chosen name and e-mail address as they appear in the
-[OCA Signatories list](https://www.oracle.com/technetwork/community/oca-486395.html#list).
+commits using the name and e-mail address you used to sign the OCA:
 You can configure Git globally (or locally as you prefer) with the commands:
 ```bash
 git config --global user.email [email protected]
@@ -31,14 +30,14 @@ check the [Issues](https://github.com/oracle/nosql-go-sdk/issues) page
 first, this helps prevent duplication of effort. If the issue is already being
 tracked, feel free to participate in the discussion.
 
-### Open a new issue
+### Opening issues
 
 If you find an issue that is not tracked in the [Issues](https://github.com/oracle/nosql-go-sdk/issues)
 page, feel free to open a new one, describe the issue, discuss your plans or
 proposed changes.
 All contributions should be connected to an issue except for the trivial changes.
 
-## Contributing
+## Contributing Code
 
 Follow the [Github Flow](https://guides.github.com/introduction/flow/) when you
 work on a change for Go SDK.
@@ -138,11 +137,10 @@ make onprem-test testcases=TestDataOperations/TestPutGetDelete
 
 See the [Examples](https://github.com/oracle/nosql-go-sdk#examples) section.
 
-## Pull Requests
+## Pull Request Process
 
 Pull requests can be made under
-[The Oracle Contributor Agreement](https://www.oracle.com/technetwork/community/oca-486395.html)
-(OCA).
+[Oracle Contributor Agreement][OCA](OCA).
 
 For pull requests to be accepted, the bottom of
 your commit message must have the following line using your name and
@@ -160,3 +158,11 @@ git commit --signoff
 
 Only pull requests from committers that can be verified as having
 signed the OCA can be accepted.
+
+## Code of conduct
+
+Follow the [Golden Rule](https://en.wikipedia.org/wiki/Golden_Rule). If you'd
+like more specific guidelines, see the [Contributor Covenant Code of Conduct][COC].
+
+[OCA]: https://oca.opensource.oracle.com
+[COC]: https://www.contributor-covenant.org/version/1/4/code-of-conduct/

LICENSE.txt

@@ -1,35 +1,35 @@
-Copyright (c) 2019, 2023 Oracle and/or its affiliates. All rights reserved.
+Copyright (c) 2019, 2023 Oracle and/or its affiliates.
 
 The Universal Permissive License (UPL), Version 1.0
 
 Subject to the condition set forth below, permission is hereby granted to any
 person obtaining a copy of this software, associated documentation and/or data
 (collectively the "Software"), free of charge and under any and all copyright
-rights in the Software, and any and all patent rights owned or freely licensable
-by each licensor hereunder covering either (i) the unmodified Software as
-contributed to or provided by such licensor, or (ii) the Larger Works
-(as defined below), to deal in both
+rights in the Software, and any and all patent rights owned or freely
+licensable by each licensor hereunder covering either (i) the unmodified
+Software as contributed to or provided by such licensor, or (ii) the Larger
+Works (as defined below), to deal in both
 
 (a) the Software, and
-(b) any piece of software and/or hardware listed in the lrgrwrks.txt file if one
-is included with the Software (each a “Larger Work” to which the Software is
-contributed by such licensors),
+(b) any piece of software and/or hardware listed in the lrgrwrks.txt file if
+one is included with the Software (each a "Larger Work" to which the Software
+is contributed by such licensors),
 
 without restriction, including without limitation the rights to copy, create
 derivative works of, display, perform, and distribute the Software and make,
-use, sell, offer for sale, import, export, have made, and have sold the Software
-and the Larger Work(s), and to sublicense the foregoing rights on either these
-or other terms.
+use, sell, offer for sale, import, export, have made, and have sold the
+Software and the Larger Work(s), and to sublicense the foregoing rights on
+either these or other terms.
 
 This license is subject to the following condition:
-
-The above copyright notice and either this complete permission notice or at a
-minimum a reference to the UPL must be included in all copies or substantial
-portions of the Software.
+The above copyright notice and either this complete permission notice or at
+a minimum a reference to the UPL must be included in all copies or
+substantial portions of the Software.
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
-FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
-COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
-IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -580,9 +580,11 @@ See the [Changelog](https://github.com/oracle/nosql-go-sdk/blob/master/CHANGELOG
 
 ## Contributing
 
-The nosql-go-sdk is an open source project. See
-[Contributing](https://github.com/oracle/nosql-go-sdk/blob/master/CONTRIBUTING.md)
-for information on how to contribute to the project.
+This project welcomes contributions from the community. Before submitting a pull request, please [review our contribution guide](./CONTRIBUTING.md)
+
+## Security
+
+Please consult the [security guide](./SECURITY.md) for our responsible security vulnerability disclosure process
 
 ## License
 

SECURITY.md

@@ -0,0 +1,38 @@
+# Reporting security vulnerabilities
+
+Oracle values the independent security research community and believes that
+responsible disclosure of security vulnerabilities helps us ensure the security
+and privacy of all our users.
+
+Please do NOT raise a GitHub Issue to report a security vulnerability. If you
+believe you have found a security vulnerability, please submit a report to
+[[email protected]][1] preferably with a proof of concept. Please review
+some additional information on [how to report security vulnerabilities to Oracle][2].
+We encourage people who contact Oracle Security to use email encryption using
+[our encryption key][3].
+
+We ask that you do not use other channels or contact the project maintainers
+directly.
+
+Non-vulnerability related security issues including ideas for new or improved
+security features are welcome on GitHub Issues.
+
+## Security updates, alerts and bulletins
+
+Security updates will be released on a regular cadence. Many of our projects
+will typically release security fixes in conjunction with the
+Oracle Critical Patch Update program. Additional
+information, including past advisories, is available on our [security alerts][4]
+page.
+
+## Security-related information
+
+We will provide security related information such as a threat model, considerations
+for secure use, or any known security issues in our documentation. Please note
+that labs and sample code are intended to demonstrate a concept and may not be
+sufficiently hardened for production use.
+
+[1]: mailto:[email protected]
+[2]: https://www.oracle.com/corporate/security-practices/assurance/vulnerability/reporting.html
+[3]: https://www.oracle.com/security-alerts/encryptionkey.html
+[4]: https://www.oracle.com/security-alerts/