From: Luis Schwab <luisschwab@protonmail.com>
Date: Wed, 5 Aug 2026 20:03:54 +0000 (-0300)
Subject: chore(doc): add GH security advisory link on SECURITY.md
X-Git-Url: http://internal-gitweb-vhost/blockdata/script/encode/-script/derive.Serialize.html?a=commitdiff_plain;h=a98ab189340c6ed2a2fbc91ee6d8178950e09b6b;p=bdk

chore(doc): add GH security advisory link on SECURITY.md
---

diff --git a/README.md b/README.md
index 45fc4680..5c5c5e07 100644
--- a/README.md
+++ b/README.md
@@ -49,6 +49,10 @@ The [`bdk_wallet`] repository and crate contains a higher level `Wallet` type th
 [`bdk_chain`]: https://docs.rs/bdk-chain/
 [`bdk_wallet`]: https://github.com/bitcoindevkit/bdk_wallet
 
+## Security Policy
+
+To report a security issue, please refer to the [security policy](SECURITY.md).
+
 ## Minimum Supported Rust Version (MSRV)
 
 The following BDK crates maintains a MSRV of 1.85.0. To build these crates with the MSRV of 1.85.0 you will need to pin dependencies by running the [`pin-msrv.sh`](./ci/pin-msrv.sh) script.
diff --git a/SECURITY.md b/SECURITY.md
index 3e2e1cd9..a9e8fb7a 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,8 +1,12 @@
 # Security Policy
 
-To report security issues send an email to `security AT bitcoindevkit DOT org` (not for support).
+To report security issues, either
 
-The following key may be used to communicate sensitive information to developers:
+- send an email to `security AT bitcoindevkit DOT org` (not for support), or
+- open a security advisory on GitHub at
+[`https://github.com/bitcoindevkit/bdk/security/advisories`](https://github.com/bitcoindevkit/bdk/security/advisories).
+
+The following key may be used to communicate sensitive information to BDK via email:
 
 | Name | Fingerprint |
 | ---- | ----------- |