doc: use github private vunerability reporting

2 files changed, 5 insertions, 3 deletions

diff --git a/README.md b/README.md
index ab16913..19e53be 100644
--- a/README.md
+++ b/README.md
@@ -249,9 +249,7 @@ gem cert --add net-ssh-public_cert.pem
 
 ## Security contact information
 
-To report a security vulnerability, please use the
-[Tidelift security contact](https://tidelift.com/security).
-Tidelift will coordinate the fix and disclosure.
+See [SECURITY.md](SECURITY.md)
 
 ## CREDITS
 
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..45d0b8e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,4 @@
+## Security contact information
+
+To report a security vulnerability, please use the
+[GitHub private vulnerability reporting feature](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability).