What is the primary purpose of SECURITY.md?

• A. Communicate security information to the community.
• B. Provide support for building Docker images.
• C. Describe coding standards for security-sensitive code.
• D. List all contributors to the project.

Answer: (A)

Security.md is a repository’s security policy, detailing how vulnerabilities should be reported, who to contact, and how the project will respond and remediate. Its main goal is to communicate security information to the community, guiding researchers and users on responsible disclosure and the maintainers’ response process. It’s not about building Docker images, it doesn’t set coding standards for security-sensitive code, and it doesn’t list contributors.