diff --git a/debian/changelog b/debian/changelog
index 1b93e71d..19d1eaae 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+in-toto (1.3.1-2) UNRELEASED; urgency=medium
+
+ * Set upstream metadata fields: Security-Contact.
+
+ -- Debian Janitor <janitor@jelmer.uk> Mon, 29 May 2023 22:42:40 -0000
+
in-toto (1.3.1-1) unstable; urgency=medium
* New upstream release includes among other things:
diff --git a/debian/upstream/metadata b/debian/upstream/metadata
index b47e95a9..e18c7968 100644
--- a/debian/upstream/metadata
+++ b/debian/upstream/metadata
@@ -4,3 +4,4 @@ Changelog: https://github.com/in-toto/in-toto/blob/develop/CHANGELOG.md
Documentation: https://in-toto.readthedocs.io
Repository: https://github.com/in-toto/in-toto.git
Repository-Browse: https://github.com/in-toto/in-toto
+Security-Contact: https://github.com/in-toto/in-toto/tree/HEAD/SECURITY.md
