improve security policy

README.md

@@ -283,3 +283,8 @@ help unexpected
 
 It contains information about differences between C and calc
 that may surprise C programmers.
+
+
+# Reporting Security Issues
+
+To report a security issue, please visit "[Reporting Security Issues](https://github.com/lcn2/calc/security/policy)".

SECURITY.md

@@ -1,4 +1,16 @@
-# Security Policy
+# Reporting Security Issues
+
+We take security bugs seriously.  We appreciate your efforts to responsibly
+disclose your findings, and will make every effort to acknowledge your
+contributions for any verified security issues when they have been fixed.
+
+To report a security issue, click on: "[Open a draft security advisory](https://github.com/lcn2/calc/security/advisories/new)"
+
+We will send a response indicating the next steps in handling your
+report. After the initial reply to your report, we will keep you informed
+of the progress towards a fix and full announcement, and may ask for
+additional information or guidance.
+
 
 ## Supported Versions
 
@@ -9,11 +21,3 @@ If the most recent stable of calc is also supported with security updates.
 FYI: please review the BUGS file, or enter the calc command:
 
     ; help BUGS
-
-## Reporting a Vulnerability
-
-Please create a calc GitHub repo issue:
-
-    https://github.com/lcn2/calc/issues
-
-Click on ((New issue)) and follow the issue template.