docs: add SECURITY.md (#2591)

We should make it explicit that tracing uses the security policy of Tokio.
tokio-rs · Jun 19, 2023 · c4efb5a · c4efb5a
1 parent bec8228
commit c4efb5a
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,9 @@
+# Security Policy
+
+Tracing is part of the Tokio project and uses the same security policy as [Tokio][tokio-security].
+
+## Report a security issue
+
+The process for reporting an issue is the same as for [Tokio][tokio-security]. This includes private reporting via [email protected].
+
+[tokio-security]: https://github.com/tokio-rs/tokio/security/policy