Merge pull request #109 from Automattic/add/security.md

Create a SECURITY.md
Automattic · Mar 27, 2024 · f902f61 · f902f61
2 parents 8c98bbe + e6512dd
commit f902f61
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -8,7 +8,7 @@ Before anything else, please take a moment to read our [Code of Conduct](CODE-OF
 
 ## Security
 
-If you happen to find a security vulnerability, we would appreciate you letting us know at https://hackerone.com/automattic and allowing us to respond before disclosing the issue publicly.
+We take security bugs seriously.  Please see our [Security](SECURITY.md) documentation for details.
 
 ## Reporting Bugs, Asking Questions, and Suggesting Features
 

diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,9 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+The Gravatar team takes security bugs in Gravatar seriously. We appreciate your efforts to responsibly disclose your findings.
+
+To report a security issue, please use [HackerOne](https://hackerone.com/automattic).
+
+Report security bugs in third-party modules to the person or team maintaining the module.