chore(doc): add GH security advisory link on SECURITY.md

diff --git a/README.md b/README.md
index 45fc46807f9a010ae52a2e7a63529e46880ed6da..5c5c5e0777dbc9373521b247559ff729a1847d9c 100644 (file)
--- a/README.md
+++ b/README.md
@@ -49,6 +49,10 @@ The [`bdk_wallet`] repository and crate contains a higher level `Wallet` type th
 [`bdk_chain`]: https://docs.rs/bdk-chain/
 [`bdk_wallet`]: https://github.com/bitcoindevkit/bdk_wallet
 
+## Security Policy
+
+To report a security issue, please refer to the [security policy](SECURITY.md).
+
 ## Minimum Supported Rust Version (MSRV)
 
 The following BDK crates maintains a MSRV of 1.85.0. To build these crates with the MSRV of 1.85.0 you will need to pin dependencies by running the [`pin-msrv.sh`](./ci/pin-msrv.sh) script.

diff --git a/SECURITY.md b/SECURITY.md
index 3e2e1cd9177617afc417ecbb2bc0d5036a4eec21..a9e8fb7a8ccd0a287a156fc0f2d61c880dd065c7 100644 (file)
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,8 +1,12 @@
 # Security Policy
 
-To report security issues send an email to `security AT bitcoindevkit DOT org` (not for support).
+To report security issues, either
 
-The following key may be used to communicate sensitive information to developers:
+- send an email to `security AT bitcoindevkit DOT org` (not for support), or
+- open a security advisory on GitHub at
+[`https://github.com/bitcoindevkit/bdk/security/advisories`](https://github.com/bitcoindevkit/bdk/security/advisories).
+
+The following key may be used to communicate sensitive information to BDK via email:
 
 | Name | Fingerprint |
 | ---- | ----------- |