docs: Add SECURITY.md

Author: mark-adams

SECURITY.md

@@ -0,0 +1,11 @@
+# Security
+
+## Reporting a Vulnerability
+
+If you identify a security vulnerability in this project, please report it responsibly by following the instructions below. Do NOT create a public issue for security issues.
+
+1. Go to the repository's [Security Advisories](../../security/advisories) page.
+2. Click on "Report a vulnerability."
+3. Provide as much detail as possible about the issue, including steps to reproduce it if applicable.
+
+Once you have submitted your vulnerability report, it will be reviewed by the maintainers and resolved appropriately.