diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..366e5bd498 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,9 @@ +# Security Policy + +If you believe you have found a security vulnerability, we encourage you to let us know right away. + +We will investigate all legitimate reports and do our best to quickly fix the problem. + +Our preference is that you make use of GitHub's private vulnerability reporting feature to disclose potential security vulnerabilities in our Open Source Software. + +To do this, please visit the security tab of the repository and click the "Report a vulnerability" button.