add security policy

Signed-off-by: Mehdi Nassim KHODJA <18899702+naskio@users.noreply.github.com>
armadaproject · Sep 25, 2024 · b6c2619 · b6c2619
1 parent 8df0eb6
commit b6c2619
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/SECURITY.md b/.github/SECURITY.md
@@ -0,0 +1,9 @@
+# Private Vulnerability Reporting
+
+This project appreciates and encourages coordinated disclosure of security vulnerabilities. We prefer that you use the
+GitHub reporting mechanism to privately report vulnerabilities. Under the main repository's Security tab,
+click "*Report a vulnerability*" to open
+the [advisory form](https://github.com/armadaproject/armada/security/advisories/new).
+
+If you are unable to report it via GitHub, have received no response after repeated attempts, or have other security
+related questions, please contact [security@gr-oss.io](mailto:security@gr-oss.io) and mention Armada in the subject.