Does also link to the Community page belongs here https://www.keycloak.org/community ? The page contains bunch of other links with some additional stuff (EG. how to report security issue, bugs, how to contribute etc). Or is it out of scope?

I'm planning on revamping that page soon:
keycloak/keycloak-web#205

The files in this repo should be consistent with that page though (eventually)

@stianst Does it make sense to have something like:

For any security-relevant issues please consider looking at our security guidelines. 

Perhaps make more explicit that security-relevant issues should not go over any public channel.

Does also link to the Community page belongs here https://www.keycloak.org/community ? The page contains bunch of other links with some additional stuff (EG. how to report security issue, bugs, how to contribute etc). Or is it out of scope?

I'm planning on revamping that page soon: keycloak/keycloak-web#205

The files in this repo should be consistent with that page though (eventually)

Ok, since it is considered how to point users to this page, I am approving this.

@stianst Does it make sense to have something like:

For any security-relevant issues please consider looking at our security guidelines. 

Perhaps make more explicit that security-relevant issues should not go over any public channel.

Fully agree, added a sentence on this