Copy vuln reporting to SECURITY.md (#325)

This is already mentioned in README but let's be explicit Close #324
spaze · May 8, 2024 · bd6ba25 · bd6ba25
2 parents 79a9c52 + ebf4285
commit bd6ba25
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,5 @@
+# Reporting a Vulnerability
+
+This is my personal site but if you find a bug please file a new issue, report the bug privately via GitHub, or let me know.
+I don't offer bounties for security bugs but I'll buy you a beer or make a donation to a charity of your choice (which you can then match if you want).
+You can find my contacts for example in [security.txt](https://www.michalspacek.cz/.well-known/security.txt) ([*what's that?*](https://www.michalspacek.com/what-is-security.txt-and-why-you-should-have-one)) or elsewhere.