From 432d069821e1c955c07254f96535e10b26a7101c Mon Sep 17 00:00:00 2001
From: Kuba Herczynski <herczyn@google.com>
Date: Mon, 3 Aug 2026 10:39:11 +0000
Subject: [PATCH] docs(security): use GitHub Security Advisories for reporting

Updates SECURITY.md to direct security reports to GitHub Security
Advisories on this repository, matching the updated policy in
a2aproject/A2A.
---
 SECURITY.md | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/SECURITY.md b/SECURITY.md
index 8b58ae9c0..2096d91f6 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,7 +1,6 @@
 # Security Policy
 
-To report a security issue, please use [g.co/vulnz](https://g.co/vulnz).
+To report a security issue, please use GitHub Security Advisories:
+[Security Advisories · a2aproject/a2a-python](https://github.com/a2aproject/a2a-python/security/advisories)
 
-The Google Security Team will respond within 5 working days of your report on g.co/vulnz.
-
-We use g.co/vulnz for our intake, and do coordination and disclosure here using GitHub Security Advisory to privately discuss and fix the issue.
+We use GitHub Security Advisories for private intake, coordination, and disclosure.