[CDAP-20182] Update security policy

cdapio · Dec 20, 2022 · 77adc26 · 77adc26
1 parent 83fa515
commit 77adc26
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/CONTRIBUTING.rst b/CONTRIBUTING.rst
@@ -7,8 +7,7 @@ Here are instructions to get you started if you want to contribute to CDAP.
 Security Reports
 ================
 
-Please *DO NOT* file an issue for security related problems. 
-Please send your reports to `[email protected] <mailto:[email protected]>`__.
+Please see SECURITY.md for reporting security vulnerabilities.
 
 Creating Issues
 ===============

diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,8 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+To report a security issue, please use [https://g.co/vulnz](https://g.co/vulnz).
+We use g.co/vulnz for our intake, and do coordination and disclosure here on
+GitHub (including using GitHub Security Advisory). The Google Security Team will
+respond within 5 working days of your report on g.co/vulnz.