Merge pull request #15 from Seagate/docs/update-security-md

[docs] Add SECURITY.md file

docs/SECURITY.md

@@ -0,0 +1,19 @@
+# CFM Security Policy
+
+We take the security of the CFM project seriously. If you find any security vulnerabilities in any of the CFM related source code managed via our [GitHub Organisation](https://github.com/Seagate) repositories, please report it to us as described below.
+
+## Reporting Security Issues
+
+:warning: **Please do not publicly report any security vulnerabilities via GitHub issues.**
+
+If you have concerns or questions, please email us at [[email protected]](mailto:[email protected]).
+
+To report an actual vulnerability, please use the "[Seagate Responsible Vulnerability Disclosure Policy](https://www.seagate.com/legal-privacy/responsible-vulnerability-disclosure-policy/)"
+
+### Reporting Format
+
+To make your reporting meaningful and help us understand the nature and scope of the issue, please include as much information as possible.
+
+### Preferred Languages
+
+We prefer all communications to be in English.