Update README, ISSUE_TEMPLATE with submissions questions from Microso…

…ft HDC

ISSUE_TEMPLATE.md

@@ -12,14 +12,38 @@ Make sure you have provided the following information:
 ###### What organization or people are asking to have this signed:
 `[your text here]`
 
-###### Version of shim:
+###### What product or service is this for:
 `[your text here]`
 
-###### Sysdev Submission ID:
+###### What is the origin and full version number of your shim?
 `[your text here]`
 
-###### What product or service is this for:
+###### What's the justification that this really does need to be signed for the whole world to be able to boot it:
 `[your text here]`
 
-###### What's the justification that this really does need to be signed for the whole world to be able to boot it:
+###### How do you manage and protect the keys used in your SHIM?
+`[your text here]`
+
+###### Do you use EV certificates as embedded certificates in the SHIM?
+`[your text here]`
+
+###### What is the origin and full version number of your bootloader (GRUB or other)?
+`[your text here]`
+
+###### If your SHIM launchers any other components, please provide further details on what is launched
+`[your text here]`
+
+###### How do the launched components prevent execution of unauthenticated code?
+`[your text here]`
+
+###### Does your SHIM load any loaders that support loading unsigned kernels (e.g. GRUB)?
+`[your text here]`
+
+###### What kernel are you using? Which patches does it includes to enforce Secure Boot?
+`[your text here]`
+
+###### What changes were made since your SHIM was last signed?
+`[your text here]`
+
+###### What is the hash of your final SHIM binary?
 `[your text here]`

README.md

@@ -7,7 +7,7 @@ This repo is for review of requests for signing shim.  To create a request for r
 - commit all of that
 - tag it with a tag of the form "myorg-shim-arch-YYYYMMDD"
 - push that to github
-- file an issue at https://github.com/rhboot/shim-review/issues with a link to your tag
+- file an issue at https://github.com/rhboot/shim-review/issues with a link to your branch
 
 Note that we really only have experience with using grub2 on Linux, so asking
 us to endorse anything else for signing is going to require some convincing on
@@ -71,14 +71,7 @@ Which files in this repo are the logs for your build?   This should include logs
 -------------------------------------------------------------------------------
 [your text here]
 
-
--------------------------------------------------------------------------------
-Put info about what bootloader you're using, including which patches it includes to enforce Secure Boot here:
--------------------------------------------------------------------------------
-[your text here]
-
 -------------------------------------------------------------------------------
-Put info about what kernel you're using, including which patches it includes to enforce Secure Boot here:
+Add any additional information you think we may need to validate this shim
 -------------------------------------------------------------------------------
 [your text here]
-