From ed1c447bbf7c93f679f919568dccb6f181109d23 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Johannes=20M=C3=BCller?= <straightshoota@gmail.com>
Date: Fri, 27 Nov 2020 15:38:26 +0100
Subject: [PATCH] Add security advisory (#9984)

---
 SECURITY.md | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000000..d4c06533aa11
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,11 @@
+## Reporting a Vulnerability
+
+Should you find any security-related issue, please *do not share them openly* in
+the issue tracker. We have a dedicated mailbox where we keep track of them:
+
+<security@manas.tech>
+
+You can encrypt your message via [Keybase](https://keybase.io/encrypt) (set
+recipient `crystal`) or with our [PGP key](https://crystal-lang.org/crystal-pgp-key.txt)
+(fingerprint `5995 C83C D754 BE44 8164 1929 0961 7FD3 7CC0 6B54`)
+also available on [Keybase server](https://keybase.io/crystal/pgp_keys.asc).