add bounty links and docs (#187)

* add bounty links and docs

* update changelog and spellcheck

CHANGELOG.md

@@ -17,6 +17,7 @@ for more details on upgrading to v4.
   - Update documentation for redisearch
   - Add new page for migration considerations when upgrading from v3 to v4
   - Add RAM usage requirements
+  - Add info about bug/security/project bounty programs
 - **Development:**
   - Add logs when getting storage errors
 - **Packaging:**

CONTRIBUTING.md

@@ -163,3 +163,13 @@ dynamic typing.
 
 By contributing, you agree that your contributions will be licensed under the
 Apache License, Version 2.0.
+
+## Bounty Programs
+
+Want to make some money for helping the project?
+
+We have project, bug, and security bounty programs which we invite anyone to
+participate in. Details for these programs can be found here:
+
+- [Bug and Security Bounty Program](https://dragonchain.com/bug-and-security-bounty)
+- [Project Bounty Program](https://dragonchain.com/strategic-projects-bounty)

README.md

@@ -22,6 +22,8 @@ and public blockchain interoperability, Dragonchain shines a new and interesting
 - [Project Documentation](https://dragonchain-core-docs.dragonchain.com/latest/)
 - [Dragonchain Console](https://console.dragonchain.com/)
 - [Dragonchain Inc](https://dragonchain.com/)
+- [Bug and Security Bounty Program](https://dragonchain.com/bug-and-security-bounty)
+- [Project Bounty Program](https://dragonchain.com/strategic-projects-bounty)
 - [Dragonchain Academy](https://academy.dragonchain.org/)
 - [Dragonchain Blog](https://dragonchain.com/blog)
 - [Dragonchain Architecture Document](https://dragonchain.com/assets/Dragonchain-Architecture.pdf)
@@ -49,7 +51,7 @@ For interaction and using the Dragonchain, check out the SDKs (or CLI) and their
 Dragonchain is implemented in Python 3, packaged into container images with Docker, and intended to be run on Kubernetes (at the moment).
 
 The [tools.sh](/tools.sh) script is used to assist in various development functions such as installing dependencies,
-automatically formatting/linting code, runnint tests, etc. Simply run `./tools.sh` with no parameters to view what it
+automatically formatting/linting code, running tests, etc. Simply run `./tools.sh` with no parameters to view what it
 can do.
 
 In order to develop locally you should be able to run `./tools.sh full-test` and have all checks pass. For this, a few requirements should be met:
@@ -68,7 +70,7 @@ In order to develop locally you should be able to run `./tools.sh full-test` and
 
 It is highly recommended to use a python virtual environment rather than simply installing the python
 package requirements to your global environment. This allows the required packages for this project
-to be seperated from the rest of the (potentially conflicting) packages from the rest of the system.
+to be separated from the rest of the (potentially conflicting) packages from the rest of the system.
 
 In order to do this, instead of step 3 above, perform the following steps:
 
@@ -84,7 +86,14 @@ For more information, including a deeper dive on the architecture/code structure
 
 ## 🚀 Contributing
 
-For info on contributing, please read the [contributing](/CONTRIBUTING.md) document.
+Want to make some money for helping the project?
+We have project, bug, and security bounty programs which we invite anyone to participate in.
+Details for these programs can be found here:
+
+- [Bug and Security Bounty Program](https://dragonchain.com/bug-and-security-bounty)
+- [Project Bounty Program](https://dragonchain.com/strategic-projects-bounty)
+
+For more info on contributing, please read the [contributing](/CONTRIBUTING.md) document.
 
 ## ✔️ Support
 

SECURITY.md

@@ -0,0 +1,21 @@
+# Security Policy
+
+The Dragonchain project is dedicated towards finding and eliminating any possible security vulnerabilities that may arise.
+
+This includes this repository as well as all auxillary Dragonchain repositories.
+
+## Supported Versions
+
+Please not that this project currently only supports the latest major version.
+
+If you are running an old version of Dragonchain, we always advise updating, and in the case of breaking changes there will be provided documentation to help you migrate to a newer version if necessary.
+
+## Reporting a Vulnerability
+
+We have a bug and security bounty program which is [available here](https://dragonchain.com/bug-and-security-bounty).
+
+Please do not submit security vulnerabilities publicly, and instead use the link above to disclose any security vulnerabilities.
+
+Please follow reasonable [responsible disclosure](https://en.wikipedia.org/wiki/Responsible_disclosure). Failure to do so will disqualify the security vulnerability from the bounty program.
+
+When in doubt if a bug is a security vulnerability, please contact us first.