Add section on reporting security vulnerabilities through Tidelift.

d8b901bc · Jason R. Coombs · 4cd3da04 · d8b901bc
Commit d8b901bc authored Mar 19, 2019 by Jason R. Coombs
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

README.rst README.rst +4 -0

No files found.
--- a/README.rst
+++ b/README.rst
@@ -29,6 +29,10 @@ Bug reports and especially tested patches may be
 submitted directly to the `bug tracker
 <https://github.com/pypa/setuptools/issues>`_.

+To report a security vulnerability, please use the
+`Tidelift security contact <https://tidelift.com/security>`_.
+Tidelift will coordinate the fix and disclosure.
+

 Code of Conduct
 ---------------