From 6bc6ee9c7e9d798c5c09e82311a1f75e075b0ae7 Mon Sep 17 00:00:00 2001
From: Alexandre Teixeira <alexandremagteixeira@gmail.com>
Date: Tue, 28 Jul 2026 20:26:38 +0100
Subject: [PATCH] docs: reconcile security reporting guidance

---
 SECURITY.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/SECURITY.md b/SECURITY.md
index 1fa5b0b3b..38265a1da 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -37,4 +37,6 @@ Only `.env.example`, docs, source, tests, and static assets should be committed.
 
 ## Reporting
 
-Please report vulnerabilities privately via GitHub security advisories if available, or by opening a minimal issue that does not disclose exploit details.
+Report security vulnerabilities privately through [GitHub Security Advisories](https://github.com/odysseus-dev/odysseus/security/advisories/new).
+
+Do not open a public issue or discussion, and do not disclose exploit details publicly.