Create SECURITY.md (horovod#3363)

EnricoMi · web-flow · commit 8c0d82a44a01 · 2022-01-13T22:08:59.000+01:00
* Create SECURITY.md
* Add security mailing list to README.rst

Signed-off-by: Enrico Minack &lt;github@enrico.minack.dev&gt;
diff --git a/README.rst b/README.rst
@@ -449,6 +449,7 @@ Getting Involved
 - `Community Slack <https://forms.gle/cPGvty5hp31tGfg79>`_ for collaboration and discussion
 - `Horovod Announce <https://lists.lfai.foundation/g/horovod-announce>`_ for updates on the project
 - `Horovod Technical-Discuss <https://lists.lfai.foundation/g/horovod-technical-discuss>`_ for public discussion
+- `Horovod Security <https://lists.lfai.foundation/g/horovod-security>`_ to report security vulnerabilities
 
 
 .. inclusion-marker-end-do-not-remove
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities to horovod-security@lists.lfaidata.foundation.
+
+Anyone can post to this mailing list, however, only active maintainers of the Horovod project will be able to read to the message.
diff --git a/docs/summary.rst b/docs/summary.rst
@@ -441,6 +441,7 @@ Getting Involved
 - `Community Slack <https://forms.gle/cPGvty5hp31tGfg79>`_ for collaboration and discussion
 - `Horovod Announce <https://lists.lfai.foundation/g/horovod-announce>`_ for updates on the project
 - `Horovod Technical-Discuss <https://lists.lfai.foundation/g/horovod-technical-discuss>`_ for public discussion
+- `Horovod Security <https://lists.lfai.foundation/g/horovod-security>`_ to report security vulnerabilities
 
 
 .. inclusion-marker-end-do-not-remove
