Create SECURITY.md (#13)

* Create SECURITY.md * update security policy Signed-off-by: Nicklas Körtge <nicklas.koertge1@ibm.com> --------- Signed-off-by: Nicklas Körtge <nicklas.koertge1@ibm.com>
IBM · Jun 12, 2024 · 411c298 · 411c298
1 parent 140f0b1
commit 411c298
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,12 @@
+# Reporting Security Issues
+
+You can privately report a potential security issue via the GitHub security advisory feature. This can be done here:
+
+https://github.com/IBM/sonar-cryptography/security/advisories
+
+Please do **not** open a public issue about a potential security vulnerability.
+
+You can find more details on the security vulnerability feature in the GitHub
+documentation here:
+
+https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability