/cc @bb7133

TiDB is a fast-growing open source database.
The TiDB security team will confirm the vulnerabilities and contact you within 2 working days after your submission.

I don't think these sentences are appropriate because TiDB is not the only user using this repo.

Hi, @tangenta the main purpose of adding this security policy is to inform users how to submit vulnerabilities. As the sql parser of tidb, the tidb security team is very concerned about the security issues of this repo. We hope that we can accept the security issues reported by the community, and we will also invest in support. Based on the above reasons, I have synchronized tidb's security policy. If the reviewer and maintainer think that the policy statement is inappropriate, welcome to put forward specific suggestions for modification, and I will modify the policy document.

Rest LGTM

@tangenta Thanks a lot for your suggestions, I have updated it.

[REVIEW NOTIFICATION]

This pull request has been approved by:

• morgo
• tangenta

To complete the pull request process, please ask the reviewers in the list to review by filling /cc @reviewer in the comment.
After your PR has acquired the required number of LGTMs, you can assign this pull request to the committer in the list by filling /assign @committer in the comment to help you merge this pull request.

The full list of commands accepted by this bot can be found here.

@dveeden: Thanks for your review. The bot only counts approvals from reviewers and higher roles in list, but you're still welcome to leave your comments.

/merge

This pull request has been accepted and is ready to merge.

@s3nt3: Your PR was out of date, I have automatically updated it for you.