Fix site publish
diff --git a/.well-known/security.txt b/.well-known/security.txt
new file mode 100644
index 0000000..9c9fc66
--- /dev/null
+++ b/.well-known/security.txt
@@ -0,0 +1,5 @@
+type=securitytxt
+contact=mailto:security@apache.org
+languages=en
+canonical=https://tomee.apache.org/.well-known/security.txt
+policy=https://tomee.apache.org/security/security.html