diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000000..2e177a225d34
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+We support only the current latest version of golangci-lint with the 2 latest minor versions of Go.
+
+## Reporting a Vulnerability
+
+To report a potential security vulnerability you create a [security advisory](https://github.com/golangci/golangci-lint/security/advisories).
+
+In order for us to best respond to your report, please include any of the following:
+
+- Steps to reproduce or proof-of-concept
+- Any relevant information, including versions used