From ef60d9fce7f04709ba3d1f0460c7c3740f7dac50 Mon Sep 17 00:00:00 2001
From: "Andrew Dunkman (he/him)" <andrew.dunkman@gsa.gov>
Date: Fri, 22 Nov 2024 12:09:47 -0500
Subject: [PATCH] Create SECURITY.md

---
 SECURITY.md | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..8eece577
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you find a security vulnerability, please use the [GitHub private security vulnerability reporting](https://github.com/18F/18f.gsa.gov/security/advisories/new) to alert us.
+
+Repository administrators will be notified when you submit an issue, and may or may not follow-up with the reporter.