feat(ui): readme update

Author: smitronin

ui/README.md

@@ -43,4 +43,20 @@ git tag ui/1.0.12
 git push origin ui/1.0.12
 ```
 
-<!-- TODO: move this ^ to the main README.md and CONTRIBUTING.md -->
+## Vulnerability issues
+Vulnerabilities, CVEs, security issues can be reported on GitLab or on GitHub by various tools/bots we use to ensure that DLE code is safe and secure. They may be of various kinds – here we consider two types, a known CVE reported for particular package we use for DLE UI code during analysis of dependencies, and some issue in code that was detected by a static analysis tool.
+
+### Packages issues
+Ways to resolve (ordered by preference in descending order):
+1. Update a package - try to look for a newer package in npm, probably this vulnerability is already fixed.
+2. If vulnerability is detected in a sub-package - try to replace it using [npm-force-resolutions](https://www.npmjs.com/package/npm-force-resolutions). Be careful using this way - it may break a project as in a build phase as at runtime. Full e2e definitely should be done in this case.
+3. Fork the package and put it locally in this repo.
+4. If you are sure this is a falsy vulnerability - try to ignore it using special commands for your SAST tool. **This is considered as the least preferable option – try to apply any of the ways described above first.**
+
+### Code issues
+Ways to resolve (ordered by preference):
+1. If the part of source code is written on `.js` try to rewrite it on `.ts` or `.tsx` - it should fix a lot of potential security issues.
+2. Follow the recommendations of your SAST tool - fix it manually or automatically.
+3. If you are sure this is a falsy vulnerability - try to ignore it using special commands for your SAST tool. **This is considered as the least preferable option – try to apply any of the ways described above first.**
+
+<!-- TODO: move this ^ to the main README.md and CONTRIBUTING.md -->

ui/cspell.json

@@ -137,6 +137,7 @@
     "craco",
     "Formik",
     "healthz",
+    "SAST",
     "rehype"
   ]
 }