Merge pull request #460 from trimble-oss/maintainer

add maintainer, security, codeowner files

Author: rthanga1

.github/CODEOWNERS

@@ -0,0 +1,30 @@
+# Global Owners
+# These owners will be the default owners for everything in the repo
+# Unless a later match takes precedence, these users will be requested for
+# review when someone opens a pull request.
+# rthanga1 has admin privileges
+
+*                           @rthanga1 @Sofiya-kumar @amosekr
+
+# Documentation
+*.md                        @rthanga1 @Sofiya-kumar @amosekr
+docs/                       @rthanga1 @Sofiya-kumar @amosekr
+
+# GitHub configuration
+/.github/                   @rthanga1
+
+# Build and CI/CD
+*.yml                       @rthanga1 @Sofiya-kumar @amosekr
+*.yaml                      @rthanga1 @Sofiya-kumar @amosekr
+*.csproj                    @rthanga1 @Sofiya-kumar @amosekr
+*.sln                       @rthanga1 @Sofiya-kumar @amosekr
+
+# Core Components
+/Trimble.Modus.Components/  @rthanga1 @Sofiya-kumar @amosekr
+
+# Demo Application  
+/DemoApp/                   @rthanga1 @Sofiya-kumar @amosekr
+
+# Security-related files
+SECURITY.md                 @rthanga1
+CODEOWNERS                  @rthanga1

.github/workflows/codeql.yml

@@ -1,6 +1,10 @@
 name: "CodeQL"
 
 on:
+  push:
+    branches: [ "develop", "main" ]
+  pull_request:
+    branches: [ "develop", "main" ]
   schedule:
     - cron: "0 0 1 * *"
   workflow_dispatch:

MAINTAINERS.md

@@ -0,0 +1,64 @@
+# Maintainers
+
+This document lists the maintainers of the Trimble Modus Mobile MAUI Components project.
+
+## Project Maintainers
+
+The project is maintained by the following individuals:
+
+| Name | Username | Role |
+|------|----------|------|
+| Ramaraj Thangapandi | [@rthanga1](https://github.com/rthanga1) | Lead Maintainer (Admin) |
+| Sofiya Kumar | [@Sofiya-kumar](https://github.com/Sofiya-kumar) | Maintainer |
+| Amose Sekar | [@amosekr](https://github.com/amosekr) | Maintainer |
+
+- **Team Email**: [modus-mobile-contributors-ug@trimble.com](mailto:modus-mobile-contributors-ug@trimble.com)
+
+## Responsibilities
+
+Project maintainers are responsible for:
+
+- **Code Review**: Reviewing and approving pull requests
+- **Release Management**: Creating releases and managing versioning
+- **Issue Triage**: Triaging issues and feature requests
+- **Security**: Responding to security vulnerabilities and maintaining security policies
+- **Community**: Supporting the developer community and maintaining project documentation
+- **Architecture**: Making architectural decisions and maintaining project roadmap
+
+## Becoming a Maintainer
+
+We welcome contributions from the community! To become a maintainer:
+
+1. **Contribute Consistently**: Make regular, quality contributions to the project
+2. **Show Expertise**: Demonstrate deep understanding of the codebase and design system
+3. **Community Involvement**: Help with issues, code reviews, and community support
+4. **Contact Us**: Reach out to the current maintainers at [modus-mobile-contributors-ug@trimble.com](mailto:modus-mobile-contributors-ug@trimble.com)
+
+## Maintainer Duties
+
+All maintainers are expected to:
+
+- Follow the [Code of Conduct](https://github.com/trimble-oss/.github/blob/main/CODE_OF_CONDUCT.md) (if available)
+- Review pull requests in a timely manner
+- Respond to issues and community questions
+- Participate in release planning and roadmap discussions
+- Maintain project documentation
+- Keep dependencies up to date
+- Monitor security vulnerabilities
+
+## Decision Making Process
+
+- **Major Changes**: Require consensus among maintainers
+- **Minor Changes**: Can be approved by any maintainer
+- **Emergency Security Updates**: Can be fast-tracked by any maintainer
+
+## Contact
+
+For maintainer-related questions or to express interest in becoming a maintainer, please contact:
+
+- **Email**: [modus-mobile-contributors-ug@trimble.com](mailto:modus-mobile-contributors-ug@trimble.com)
+- **GitHub Issues**: [Create an issue](https://github.com/trimble-oss/modus-mobile-maui-components/issues) with the `maintainer` label
+
+---
+
+*This file is maintained by the project maintainers and updated as needed.*

SECURITY.md

@@ -0,0 +1,59 @@
+# Security Policy
+
+## Supported Versions
+
+We release patches for security vulnerabilities in the following versions:
+
+| Version | Supported          |
+| ------- | ------------------ |
+| Latest  | :white_check_mark: |
+| < Latest| :x:                |
+
+## Reporting a Vulnerability
+
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+Instead, please report security vulnerabilities to the Trimble security team:
+
+- **Email**: [trimble-oss-contrib-admins-ug@trimble.com](mailto:trimble-oss-contrib-admins-ug@trimble.com)
+- **Subject Line**: [SECURITY] Trimble Modus Mobile MAUI Components - [Brief description]
+
+Please include the following information in your report:
+
+- Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
+- Full paths of source file(s) related to the manifestation of the issue
+- The location of the affected source code (tag/branch/commit or direct URL)
+- Any special configuration required to reproduce the issue
+- Step-by-step instructions to reproduce the issue
+- Proof-of-concept or exploit code (if possible)
+- Impact of the issue, including how an attacker might exploit the issue
+
+## Response Process
+
+1. **Acknowledgment**: We will acknowledge receipt of your vulnerability report within 48 hours
+2. **Investigation**: We will investigate and validate the vulnerability
+3. **Resolution**: We will work on a fix and coordinate disclosure timing with you
+4. **Disclosure**: We will publicly disclose the vulnerability after a fix is available
+
+## Security Best Practices
+
+When using Trimble Modus Mobile MAUI Components:
+
+- Always use the latest version of the library
+- Keep your .NET MAUI framework updated
+- Follow secure coding practices in your applications
+- Regularly update your dependencies
+- Monitor security advisories for related packages
+
+## Security Features
+
+This library includes the following security measures:
+
+- Regular dependency updates through Dependabot
+- Automated security scanning via CodeQL
+- Code review requirements for all changes
+- Vulnerability assessments on releases
+
+## Contact
+
+For questions about this security policy, please contact [modus-mobile-contributors-ug@trimble.com](mailto:modus-mobile-contributors-ug@trimble.com).