security.txt
Setup security.txt based on : https://securitytxt.org
To sign "in file": gpg --clear-sign security.txt (it will create an .asc file, remove the .asc and validate it with gpg --verify security.txt).
use the extra --local-user KEYID to specify a given key.
Edited by Nicolas -