Add security policy

[mikkoi]

Issue #391

[oalders]

We should probably check with @petdance about being the security contact. Not sure if that conversation happened somewhere else?

[mikkoi]

Another possibility would be to harness GitHub's new Private vulnerability reporting in Security (tab).

[petdance]

Heavens, no, I shouldn't be a contact for anything.

[oalders]

Another possibility would be to harness GitHub's new Private vulnerability reporting in Security (tab).

Oh, I did not know about this. I've enabled it for this repo. Can we amend the document to reflect this?

[mikkoi]

Oh, I did not know about this. I've enabled it for this repo. Can we amend the document to reflect this?

Will do!

[mikkoi]

Done.

[mikkoi]

Shall we add a similar SECURITY.md to LWP::UserAgent?

[oalders]

Shall we add a similar SECURITY.md to LWP::UserAgent?

Please

[oalders]

There are some proposed changes in #398. Could you review those? I don't know why it didn't just comment on this PR. Maybe I don't know how to invoke copilot correctly.

[mikkoi]

I would say Copilot did a good job. It noticed spelling errors and the wrong branch name.
I applied the fixes over the original.

[oalders]

It looks like I should have requested a review from copilot under the "Reviewers" section.

[oalders]

Thanks, @mikkoi!