message: feat(policy): add information on security disclosures
diff: @@ -56,5 +56,16 @@ There are two important, related aspects:
  cannot be directly answered in the hypothetical sense. All of the details
  must be taken into consideration in these kinds of situations.
  +# Security
  +
  +Cargo and crates.io are projects that are governed by the Rust Programming
  +Language Team. Safety is one of the core principles of Rust, and to that end,
  +we would like to ensure that cargo and crates.io have secure implementations.
  +To learn more about disclosing security vulnerabilities, please reference the
  +[Rust Security policy] for more details.
  +
  +Thank you for taking the time to responsibly disclose any issues you find.
  +
  +[Rust Security policy]: https://www.rust-lang.org/security.html
  [Code of Conduct]: https://www.rust-lang.org/conduct.html
  [sending us an email]: mailto:help@crates.io
  