From 9c128a2256dee96063d9e60ab1648895d7ce6950 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Wed, 26 Aug 2026 16:51:01 +0100 Subject: [PATCH] docs(security): add SECURITY.md pointer to SECURITY.adoc Glama counts a repository as having no security policy unless it finds the literal filename SECURITY.md. This repo has a full SECURITY.adoc; only the filename those tools look for was absent. A pointer rather than a copy, so there stays exactly one source of truth. Owner-directed 2026-08-26: boj-server specifically needs the .md form; boj-server-cartridges does not. Co-Authored-By: Claude Opus 5 --- SECURITY.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..e608291b --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,22 @@ + + +# Security Policy + +**The security policy for this repository lives in [`SECURITY.adoc`](SECURITY.adoc).** + +Please read that file — it is the authoritative document. + +## Why this file exists + +This estate writes prose in AsciiDoc, so every community-health document here is `.adoc`. +That is a deliberate convention, not an omission. + +Some tools only look for the literal filename `SECURITY.md` and report the policy as +missing when they do not find it — Glama counts a repository as having no security policy +without it. This pointer satisfies that check without duplicating the policy text, so +there is exactly one source of truth. + +Do not copy the policy into this file; it will drift.