Conda-forge.github.io: Adding SECURITY.md

[jakirkham]

GitHub added SECURITY.md earlier this year. It would be good to figure out if this is something we want to include in our repos, if so which ones, and what should be contained in it.

As one possibility, we might include a security policy in the docs here and have repos merely link to it (so as to cutdown churn and avoid staleness). There might be other good options though.

[isuruf]

As one possibility, we might include a security policy in the docs here and have repos merely link to it (so as to cutdown churn and avoid staleness).

You can add it to https://github.com/conda-forge/.github

[scopatz]

Do we have a security policy at all? I am interested in hearing what we think the policy should be

[jakirkham]

I guess this would be a question for the security and subsystem team 😉

cc @CJ-Wright @beckermr

[beckermr]

I'm no expert in systems or security. I'm just an interested party.

Most of my concerns center around the security of our own systems and accounts.

We could ask people to get in touch with us via an email address if they have concerns.