Added SECURITY.md file

- Consistent with other public repos - Points at our docs on how to report security issues
2019-03-10 15:35:57 +00:00 · 2019-03-10 15:35:57 +00:00 · c4fb156508
parent 91ffa335de
commit c4fb156508
1 changed files with 9 additions and 0 deletions
--- a/SECURITY.md
+++ b/SECURITY.md
@ -0,0 +1,9 @@
+# Reporting Security Vulnerabilities
+
+Potential security vulnerabilities can be reported directly us at `security@ghost.org`. The Ghost Security Team communicates privately and works in a secured, isolated repository for tracking, testing, and resolving security-related issues.
+
+The full, up-to-date details of our security policy and procedure can always be found in our documentation:
+
+https://docs.ghost.org/security/
+
+Please refer to this before emailing us. Thanks for helping make Ghost safe for everyone 🙏.