SECURITY.md: new file

Closes: #164

Signed-off-by: Giuseppe Scrivano <[email protected]>

Author: giuseppe

Makefile.am

@@ -52,7 +52,7 @@ crun_SOURCES = src/crun.c src/run.c src/delete.c src/kill.c src/pause.c src/unpa
 crun_LDADD = libcrun.la $(FOUND_LIBS)
 crun_LDFLAGS = $(CRUN_LDFLAGS)
 
-EXTRA_DIST = COPYING COPYING.libcrun README.md NEWS rpm/crun.spec.in autogen.sh \
+EXTRA_DIST = COPYING COPYING.libcrun README.md NEWS SECURITY.md rpm/crun.spec.in autogen.sh \
 	src/crun.h src/list.h src/run.h src/delete.h src/kill.h src/pause.h src/unpause.h \
 	src/create.h src/start.h src/state.h src/exec.h src/spec.h src/update.h src/ps.h \
 	src/libcrun/container.h src/libcrun/seccomp.h src/libcrun/ebpf.h src/libcrun/cgroup.h \

SECURITY.md

@@ -0,0 +1,7 @@
+## Reporting a Vulnerability
+
+If you discover a potential security issue in this project we ask that
+you notify us directly via email to security@oci.run (not affiliated
+with opencontainers.org).
+
+Please do **not** create a public issue.