Add security advisory (crystal-lang#9984)

Bizalog · Nov 27, 2020 · ed1c447 · ed1c447
1 parent f0391d7
commit ed1c447
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,11 @@
+## Reporting a Vulnerability
+
+Should you find any security-related issue, please *do not share them openly* in
+the issue tracker. We have a dedicated mailbox where we keep track of them:
+
+<[email protected]>
+
+You can encrypt your message via [Keybase](https://keybase.io/encrypt) (set
+recipient `crystal`) or with our [PGP key](https://crystal-lang.org/crystal-pgp-key.txt)
+(fingerprint `5995 C83C D754 BE44 8164 1929 0961 7FD3 7CC0 6B54`)
+also available on [Keybase server](https://keybase.io/crystal/pgp_keys.asc).