Merge pull request jupyter#1 from rcthomas/master

Tweak text and add github alerts sentence

Author: rpwagner

security.md

@@ -1,11 +1,15 @@
 ---
 layout: page_md
 title: Security
-tagline: Project Jupyter is committed to reducing the risk of using, deploying, operating, or developing Jupyter software.
+tagline: Project Jupyter is committed to reducing risk in using, deploying, operating, or developing Jupyter software.
 permalink: /security
 ---
 
-## Report vulnerabilities
+The Jupyter Security Subproject exists to provide help and advice to Jupyter
+users, operators, and developers on security topics and to help coordinate handling
+of security issues.
+
+## Reporting vulnerabilities
 
 If you believe you've found a security vulnerability in a Jupyter project,
 please report it to [security@ipython.org](mailto:security@ipython.org).
@@ -16,6 +20,9 @@ you can use [this PGP public key](assets/ipython_security.asc).
 
 Known vulnerabilities are tracked using the [CVE vendor ID 15653 for Jupyter](https://www.cvedetails.com/vulnerability-list/vendor_id-15653/Jupyter.html).
 
+[GitHub](https://docs.github.com/en/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/about-alerts-for-vulnerable-dependencies) provides alerts about vulnerable dependencies.
+If your supply chain includes Jupyter projects, these alerts can help you respond to vulnerabilities quickly and easily.
+
 ## Security documentation
 
 Several Jupyter projects maintain security-related documentation regarding usage or deployment of
@@ -24,9 +31,9 @@ Jupyter software.
 - [jupyter-server](https://jupyter-server.readthedocs.io/en/latest/operators/security.html)
 - [jupyterhub](https://jupyterhub.readthedocs.io/en/stable/reference/websecurity.html)
 
-## Jupyter Security Subproject
+## Community resources
+
+We are working to identify and coordinate security efforts across the Jupyter community and within all the various subprojects.
+The [Jupyter Security](https://github.com/jupyter/security) GitHub repo has information how to participate and contribute.
+For discussion, please use the special Discourse [security topic](https://discourse.jupyter.org/c/special-topics/security/48) on the Jupyter Discourse server.
 
-The Jupyter Security Subproject is working to identify and coordinate
-the security efforts throughout the Jupyter community. The
-[Jupyter Security](https://github.com/jupyter/security) GitHub repo
-has information how to participate and contribute.