Platforms Impacted

• iOS
• visionOS
• macOS

Description of changes

The Microsoft SECURITY.md standard file has varied over time with a number of different versions. Additionally, some repositories have made modifications. With thousands of Microsoft owned open source repositories, there is not consistency in how we instruct users to report security problems.

To minimize future toil and ensure a unified and accurate experience for public users reporting security issues in Microsoft repositories, we are moving to a normalized approach where the SECURITY.md file will have only a brief message that points to a central location where more information is provided on how users can securely report security problems in Microsoft owned repositories. Putting most of the content in a central location lets us more easily update links and instructions in a single place rather than thousands of places. There may be S360 alerts raised to nudge you into adopting the new standard. This is a one-time effort to reduce update toil in the future.

Pull request checklist

This PR has considered:

• Light and Dark appearances
• iOS supported versions (all major versions greater than or equal current target deployment version)
• VoiceOver and Keyboard Accessibility
• Internationalization and Right to Left layouts
• Different resolutions (1x, 2x, 3x)
• Size classes and window sizes (iPhone vs iPad, notched devices, multitasking, different window sizes, etc)
• iPad Pointer interaction
• SwiftUI consumption (validation or new demo scenarios needed)
• Objective-C exposure (provide it only if needed)

Microsoft Reviewers: Open in CodeFlow