diff --git a/.github/workflows/add-issue-to-project.yml b/.github/workflows/add-issue-to-project.yml
index e3984c6..db41631 100644
--- a/.github/workflows/add-issue-to-project.yml
+++ b/.github/workflows/add-issue-to-project.yml
@@ -3,9 +3,14 @@ on:
issues:
types: [opened]
+permissions: {}
+
jobs:
add-to-project:
runs-on: ubuntu-latest
+ permissions:
+ contents: read
+ repository-projects: write
steps:
- name: Add issue to project
uses: actions/add-to-project@v1
diff --git a/SECURITY.md b/SECURITY.md
index 034e848..183ab17 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,21 +1,20 @@
# Security Policy
-## Supported Versions
+## Scope
-Use this section to tell people about which versions of your project are
-currently being supported with security updates.
-
-| Version | Supported |
-| ------- | ------------------ |
-| 5.1.x | :white_check_mark: |
-| 5.0.x | :x: |
-| 4.0.x | :white_check_mark: |
-| < 4.0 | :x: |
+This repository contains the static website published at https://leksiko.eu
+(HTML/CSS and a small amount of client-side JavaScript). There is no backend
+code, database or build pipeline in this repository.
## Reporting a Vulnerability
-Use this section to tell people how to report a vulnerability.
+Report suspected vulnerabilities by e-mail to lauri@leksiko.edu.ee, or privately
+via GitHub Security Advisories ("Report a vulnerability" on the Security tab).
+
+Please include the affected URL or file, steps to reproduce, and the impact you
+observed. You can expect an initial response within 7 days. Accepted issues are
+fixed on `main` and deployed with the next site update; declined reports get a
+short explanation.
-Tell them where to go, how often they can expect to get an update on a
-reported vulnerability, what to expect if the vulnerability is accepted or
-declined, etc.
+Please do not open public issues for security reports, and do not run automated
+scans or load tests against the live site.
diff --git a/index.html b/index.html
index eb4c6b4..915896e 100644
--- a/index.html
+++ b/index.html
@@ -4,6 +4,8 @@
+
+
Avatud koodiga tarkvara: koolitused, kood, sõnastik
@@ -479,9 +481,9 @@