📝 Add a GitHub-specific security policy note

PR ansible#56866 It'll show up at https://github.com/ansible/ansible/security/policy and will help us guide users to the proper docs page Co-authored-by: Alicia Cozine <[email protected]>
dmp1ce · May 23, 2019 · ab96d22 · ab96d22
1 parent 2068062
commit ab96d22
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/.github/SECURITY.md b/.github/SECURITY.md
@@ -0,0 +1,15 @@
+# Security Policy
+
+## Supported Versions
+
+Ansible applies security fixes according to the 3-versions-back support
+policy. Please find more information in [our docs](
+https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html#release-status
+).
+
+## Reporting a Vulnerability
+
+We encourage responsible disclosure practices for security
+vulnerabilities. Please read our [policies for reporting bugs](
+https://docs.ansible.com/ansible/devel/community/reporting_bugs_and_features.html#reporting-a-bug
+) if you want to report a security issue that might affect Ansible.