update security policy for security advisory link

Author: jgadsden

SECURITY.md

@@ -1,9 +1,12 @@
 ## Security Policy
 
-This project is built on markdown which is used to create various binary files such as `.pdf`.
-It is improbable but not impossible that a malicious actor could somehow embed malware in the markdown or subvert the document creation process. 
+This project is built on markdown which is used to create binary files, such as `.pdf` and `epub,` and the site itself.
+It is not impossible that a malicious actor could somehow embed malware in the markdown or subvert the document creation process. 
+If you find anything suspicious in either the markdown or pipeline scripts then let us know ASAP and we will fix it as a priority.
 
-If you find anything suspicious in either the markdown or scripts then let us know ASAP and we will fix it as a priority.
-For secure disclosure of any vulnerability follow the steps shown in the [github guide][disclose].
+Ideally open a [security advisory][advisory] and this will be provided only to the project's admins in strict confidence.
 
-[disclose]: https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability
+Alternatively send an encrypted email to [Jon Gadsden][mail] to start the secure disclosure process.
+
+[advisory]: https://github.com/OWASP/www-project-developer-guide/security/advisories/new
+[mail]: https://flowcrypt.com/me/jongadsden