Add Security Vulnerability Policy pointing to REP-2006.

Signed-off-by: Chris Lalancette <clalancette@openrobotics.org>
ros2 · May 29, 2020 · b362128 · b362128
1 parent 095e882
commit b362128
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rcl_logging_spdlog/QUALITY_DECLARATION.md b/rcl_logging_spdlog/QUALITY_DECLARATION.md
@@ -140,7 +140,7 @@ Below are evaluations of each of `rcl_logging_spdlog`'s run-time and build-time
 
 ### Vulnerability Disclosure Policy [7.i]
 
-`rcl_logging_spdlog` does not have a Vulnerability Disclosure Policy.
+This package conforms to the Vulnerability Disclosure Policy in [REP-2006](https://www.ros.org/reps/rep-2006.html).
 
 # Current status Summary