PDFBOX-5300: link to security guidance

content/security.md

diff --git a/content/security.md b/content/security.md
index d412690..50c1550 100644
--- a/content/security.md
+++ b/content/security.md
@@ -29,6 +29,8 @@
 problems. However, processing them may cause unchecked exceptions
 such as `StackOverflowError` or `NullPointerException`, infinite loops, or even use
 unexpected amounts of memory or cpu usage, including exhaustion of these.
+See also our [Security Scan Guidance](https://github.com/apache/pdfbox/security/policy)
+for security scanners and vulnerability researchers.
 
 ## Reporting security issues