As part of the community health files, a security policy to give instructions for how to report a security vulnerability the project will be created.
The feature is configured by a security.md file that must be placed either in the root, /docs or .github directory of an repository.

For Nord this file will be provided globally for all projects by this organization .github repository that do not require a specific or special configuration.