From e13e8a09c2d8b475a8ba9fb511f13a2456761720 Mon Sep 17 00:00:00 2001
From: Luis Schwab <luisschwab@protonmail.com>
Date: Wed, 5 Aug 2026 17:00:13 -0300
Subject: [PATCH] chore(doc): add GH security advisory link on SECURITY.md

---
 README.md   | 4 ++++
 SECURITY.md | 8 ++++++--
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 2176a4734..be333f982 100644
--- a/README.md
+++ b/README.md
@@ -112,6 +112,10 @@ println!("Next receive address: {}", address_info.address);
 Ok::<_, anyhow::Error>(())
 ```
 
+## Security Policy
+
+To report a security issue, please refer to the [security policy](SECURITY.md).
+
 ## Minimum Supported Rust Version (MSRV)
 
 The libraries in this repository maintain a MSRV of 1.85.0.
diff --git a/SECURITY.md b/SECURITY.md
index 3e2e1cd91..cb7c7b9a9 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,8 +1,12 @@
 # Security Policy
 
-To report security issues send an email to `security AT bitcoindevkit DOT org` (not for support).
+To report security issues, either
 
-The following key may be used to communicate sensitive information to developers:
+- send an email to `security AT bitcoindevkit DOT org` (not for support), or
+- open a security advisory on GitHub at
+[`https://github.com/bitcoindevkit/bdk_wallet/security/advisories`](https://github.com/bitcoindevkit/bdk_wallet/security/advisories).
+
+The following key may be used to communicate sensitive information to BDK via email:
 
 | Name | Fingerprint |
 | ---- | ----------- |