From 576294a8d0c9be1e813641f4e358f4466e5461f3 Mon Sep 17 00:00:00 2001
From: "google-cloud-policy-bot[bot]"
 <80869356+google-cloud-policy-bot[bot]@users.noreply.github.com>
Date: Fri, 30 Apr 2021 18:28:30 +0000
Subject: [PATCH] chore: add SECURITY.md (#440)

add a security policy
---
 java-core/SECURITY.md | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 java-core/SECURITY.md

diff --git a/java-core/SECURITY.md b/java-core/SECURITY.md
new file mode 100644
index 0000000000..8b58ae9c01
--- /dev/null
+++ b/java-core/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+To report a security issue, please use [g.co/vulnz](https://g.co/vulnz).
+
+The Google Security Team will respond within 5 working days of your report on g.co/vulnz.
+
+We use g.co/vulnz for our intake, and do coordination and disclosure here using GitHub Security Advisory to privately discuss and fix the issue.