diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..f3376d1
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,6 @@
+<!-- markdownlint-disable-next-line MD002 -->
+# Security Policy
+
+## Reporting a Vulnerability
+
+See the [Chef Security Policy](https://chef.io/security) for our security policy and how to report a vulnerability.