[Doc][Security] Improve Security Documentation

[pjfanning]

Search before asking

• I had searched in the issues and found no similar feature requirement.

Description

DolphinScheduler has its own email address - security@dolphinscheduler.apache.org

Your Security Page lists the main Apache one - security@apache.org
https://github.com/apache/dolphinscheduler/edit/dev/docs/docs/en/contribute/join/security.md

Could you adjust dev/docs/docs/en/contribute/join/security.md to include a link to the ASF Security process?
https://www.apache.org/security/committers.html

You also have the GitHub page:
https://github.com/apache/dolphinscheduler?tab=security-ov-file#readme

This inherits the ASF default page.
Could you replace this by adding a SECURITY.md page in the root of your git repo that replaces this with a link to https://github.com/apache/dolphinscheduler/edit/dev/docs/docs/en/contribute/join/security.md ?

Documentation Links

No response

Are you willing to submit a PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[phanendharreddy]

Hi @pjfanning , @SbloodyS , @ruanwenjun ,
I have submitted a pull request to address this issue: #17481 Improve security documentation and add SECURITY.md.
Please review when possible!
Thank you

[dill21yu]

Hi @pjfanning,
I've submitted a pull request to address the concerns raised in this issue: #17717

The changes include:

• Adding a SECURITY.md file in the repository root
• Updating the security documentation to use security@dolphinscheduler.apache.org
• Linking to the ASF Security Process as requested

Could you please take a look and let me know if this meets your expectations?
Also cc @SbloodyS @ruanwenjun for review.