From f537b34d5992e374c6a38cdc66ba499a8159d698 Mon Sep 17 00:00:00 2001
From: "google-cloud-policy-bot[bot]"
 <80869356+google-cloud-policy-bot[bot]@users.noreply.github.com>
Date: Mon, 3 May 2021 15:04:08 +0000
Subject: [PATCH] chore: add SECURITY.md (#239)

chore: add SECURITY.md
---
 java-workflows/SECURITY.md | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 java-workflows/SECURITY.md

diff --git a/java-workflows/SECURITY.md b/java-workflows/SECURITY.md
new file mode 100644
index 000000000000..8b58ae9c01ae
--- /dev/null
+++ b/java-workflows/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+To report a security issue, please use [g.co/vulnz](https://g.co/vulnz).
+
+The Google Security Team will respond within 5 working days of your report on g.co/vulnz.
+
+We use g.co/vulnz for our intake, and do coordination and disclosure here using GitHub Security Advisory to privately discuss and fix the issue.