From f4209757c2828d88f410cdb39dbfb7e2ecbbdf36 Mon Sep 17 00:00:00 2001
From: Ian Wienand <iwienand@redhat.com>
Date: Mon, 15 Feb 2021 15:26:09 +1100
Subject: [PATCH] docs: add note on service-incident list

This is a private list to contact administrators that is suitable for
raising security concerns.

Change-Id: I886f67d875abd09753511f6c33312cfc5eb62933
---
 doc/source/index.rst | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/doc/source/index.rst b/doc/source/index.rst
index 6108bc9f35..b248d84c4e 100644
--- a/doc/source/index.rst
+++ b/doc/source/index.rst
@@ -11,8 +11,17 @@ developers.
 Developers or users of projects hosted on OpenDev do not need to read
 this documentation.
 
-Instead, see the `Infra Manual <https://docs.opendev.org/opendev/infra-manual/latest/>`_
-to learn how contribute.
+Instead, see the `Infra Manual
+<https://docs.opendev.org/opendev/infra-manual/latest/>`_ to learn how
+contribute.
+
+Security policy
+---------------
+
+If you find or suspect a security issue with any OpenDev services,
+please inform the administrators via email at
+service-incident@lists.opendev.org.
+
 Contents:
 
 .. sidebar:: HOWTOs