Guide Section: Vulnerability Disclosure Policies

[ruddermann]

The purpose of this guide section is to help maintainers generate and maintain VDP Policies using the provided templates below. This includes a section-by-section explanation of the current contents of the templates and considerations for customization.

A working draft of this guidance can be found here: https://docs.google.com/document/d/1J2ao1b7b2R6uM7Sew0XVwRdIO1q3TxLttbiNJdG_5pI

Templates

Preview Give feedback

1. Template: Minimal Vulnerability Disclosure Policy #107
   security-agenda template +2
   
2. Template: Recommended Vulnerability Disclosure Policy #108
   template +1
   

[SecurityCRob]

CRob from OpenSSF's Vulnerability Disclosure WG. Template looks good, I left a comment and a small suggestion related to it. Nice work!