diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
new file mode 100644
index 00000000..5805e3bb
--- /dev/null
+++ b/CODE_OF_CONDUCT.md
@@ -0,0 +1,5 @@
+# Code of Conduct
+
+HAMi follows the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/main/code-of-conduct.md).
+
+The full HAMi-specific code of conduct is in [CODE_OF_CONDUCT.md](https://github.com/Project-HAMi/HAMi/blob/master/CODE_OF_CONDUCT.md) in the main HAMi repository. It applies to this repository as well.
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..3d4386c2
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+# Security Policy
+
+This repository holds the HAMi documentation website. For the HAMi project security policy, supported versions, and how to report a vulnerability, see [SECURITY.md](https://github.com/Project-HAMi/HAMi/blob/master/SECURITY.md) in the main HAMi repository.
+
+If you find a security issue specific to this website (for example in the build pipeline or hosted site), report it the same way: through [GitHub Security Advisories](https://github.com/Project-HAMi/website/security/advisories/new).