summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--README.md4
-rw-r--r--SECURITY.md4
2 files changed, 5 insertions, 3 deletions
diff --git a/README.md b/README.md
index ab16913..19e53be 100644
--- a/README.md
+++ b/README.md
@@ -249,9 +249,7 @@ gem cert --add net-ssh-public_cert.pem
## Security contact information
-To report a security vulnerability, please use the
-[Tidelift security contact](https://tidelift.com/security).
-Tidelift will coordinate the fix and disclosure.
+See [SECURITY.md](SECURITY.md)
## CREDITS
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..45d0b8e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,4 @@
+## Security contact information
+
+To report a security vulnerability, please use the
+[GitHub private vulnerability reporting feature](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability).