docs: a GitHub security policy

nedbat · nedbat · commit aa340803944d · 2022-08-03T11:41:35.000-04:00
diff --git a/.github/SECURITY.md b/.github/SECURITY.md
@@ -0,0 +1,4 @@
+# Security Disclosures
+
+To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure with maintainers.
