Seems like there should be this link for the file to be accepted (#326)

And the text should also contain specific text as per
https://github.com/spaze/michalspacek.cz/security/code-scanning/64

Close #324 again
Follow-up to #325

SECURITY.md

@@ -1,5 +1,10 @@
 # Reporting a Vulnerability
 
-This is my personal site but if you find a bug please file a new issue, report the bug privately via GitHub, or let me know.
+This is my personal site but if you find a bug and would like to disclose it, please file a new issue,
+or report the bug [privately via GitHub](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability), or let me know somehow, email me for example.
+
+If the bug report is valid, I'll fix the bug as soon as possible. General speaking, the fix should be available within 30 days, but usually it will be much sooner.
+
 I don't offer bounties for security bugs but I'll buy you a beer or make a donation to a charity of your choice (which you can then match if you want).
+
 You can find my contacts for example in [security.txt](https://www.michalspacek.cz/.well-known/security.txt) ([*what's that?*](https://www.michalspacek.com/what-is-security.txt-and-why-you-should-have-one)) or elsewhere.