README.md: add Security Response section
@@ -145,3 +145,9 @@ The model implemented by the MCO is that the cluster controls the operating syst
# Developing the MCO
See [HACKING.md](docs/HACKING.md).
+
+# Security Response
+
+If you've found a security issue that you'd like to disclose confidentially
+please contact Red Hat's Product Security team. Details at
+https://access.redhat.com/security/team/contact
\ No newline at end of file
