Add SECURITY.md (#16224)

## Summary

Resolves #16206.

The file was copied almost verbatim from
[uv's](929e7c3ad9/SECURITY.md),
with the first section removed.

## Test Plan

None.
This commit is contained in:
InSync 2025-02-18 21:42:55 +07:00 committed by GitHub
parent 711af0d929
commit 0868e73d2c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

15
SECURITY.md Normal file
View file

@ -0,0 +1,15 @@
# Security policy
## Reporting a vulnerability
If you have found a possible vulnerability, please email `security at astral dot sh`.
## Bug bounties
While we sincerely appreciate and encourage reports of suspected security problems, please note that
Astral does not currently run any bug bounty programs.
## Vulnerability disclosures
Critical vulnerabilities will be disclosed via GitHub's
[security advisory](https://github.com/astral-sh/ruff/security) system.