Merge pull request #13 from enterprise-contract/security-md

Create SECURITY.md

Author: lcarva

SECURITY.md

@@ -0,0 +1,10 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+To report a security issue, please click on the "Report a vulnerability" button from the "Security" tab.
+See detailed [instructions]([url](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability)https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability).
+
+The maintainers will respond within 3 working days of the report.
+If the issue is confirmed as a vulnerability, we will open a Security Advisory.
+We will fully acknowledge the reporter for responsibly disclosing the vulnerability.