.github/SECURITY.md

We take security bugs seriously. We appreciate your efforts to reasonably disclose
your finding and will make every effort to acknowledge your contributions.