Merge pull request #254 from ossf/security_md

Add simple SECURITY.md appropriate for a WG
ossf · Oct 11, 2023 · 95be971 · 95be971
2 parents 25dbeaf + af1d02e
commit 95be971
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,12 @@
+# Security
+
+Per the
+[Linux Foundation Vulnerability Disclosure Policy](https://www.linuxfoundation.org/security),
+if you find a vulnerability in a project maintained by the OpenSSF,
+please report that directly to the project maintaining that code.
+
+If you've been unable to find a way to report it,
+or have received no response after repeated attempts, please contact the
+OpenSSF security contact email, security @ openssf . org.
+
+Thank you.