docs(security): add initial security policy

janderssonse · janderssonse · commit 67fc0d91145c · 2025-08-27T19:01:52.000+02:00
Signed-off-by: Josef Andersson &lt;janderssonse@proton.me&gt;
diff --git a/README.md b/README.md
@@ -905,7 +905,7 @@ Take a look at the [`CONTRIBUTING.md`](CONTRIBUTING.md) guide.
 
 ## Security vulnerabilities
 
-Please contact [David Peter](https://david-peter.de/) via email if you want to report a vulnerability in `bat`.
+See [`SECURITY.md`](SECURITY.md).
 
 ## Project goals and alternatives
 
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,5 @@
+# Security Vulnerabilities
+
+To report a security vulnerability, please contact [David Peter](https://david-peter.de/) via email.
+
+Thank you for helping to improve the security of `bat`!
