docs: Update security to use github reporting
Hackerone hasn't turned out to be particularly useful. Fortunately, github now
has a mechanism to directly report security vulnerabilities within the project's
pages. Update the docs to show this as the preferred vulnerability reporting
mechanism.
Signed-off-by: David Brown <david.brown@linaro.org>
diff --git a/docs/SECURITY.md b/docs/SECURITY.md
index 9eac59f..f995385 100644
--- a/docs/SECURITY.md
+++ b/docs/SECURITY.md
@@ -5,9 +5,11 @@
## Reporting security issues
-You should report security issues either using our page at [Hackerone]
-(https://hackerone.com/mcuboot?type=team) or contacting directly the
-current maintainers of the project:
+The preferred way to report security issues with MCUboot is via the "Report a
+security vulnerability" button on the main [security
+page](https://github.com/mcu-tools/mcuboot/security).
+
+You can also directly contact the following maintainers of the project:
- David Brown: davidb@davidb.org or david.brown@linaro.org
- Fabio Utzig: utzig@apache.org