SECURITY.md

Vulnerability Disclosure

If you believe you have found a security issue in vendir, please privately and responsibly disclose it by following the directions in our security policy.