From 6772225477c6cd26aa3bc38c7814b96471ced229 Mon Sep 17 00:00:00 2001
From: Josef Andersson <josef.andersson@gmail.com>
Date: Wed, 27 Aug 2025 20:33:50 +0200
Subject: [PATCH] docs(security): add initial security policy (#3290)

---
 README.md   | 2 +-
 SECURITY.md | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)
 create mode 100644 SECURITY.md

diff --git a/README.md b/README.md
index 413a8a84..89835672 100644
--- a/README.md
+++ b/README.md
@@ -905,7 +905,7 @@ Take a look at the [`CONTRIBUTING.md`](CONTRIBUTING.md) guide.
 
 ## Security vulnerabilities
 
-Please contact [David Peter](https://david-peter.de/) via email if you want to report a vulnerability in `bat`.
+See [`SECURITY.md`](SECURITY.md).
 
 ## Project goals and alternatives
 
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..76c64c0b
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,3 @@
+# Security Vulnerabilities
+
+To report a security vulnerability, please contact [David Peter](https://david-peter.de/) via email.