open source release: add SECURITY.md

A file directing users to the proper place to report security issues is
one of the requirements for releasing projects as open source. Add
SECURITY.md file pointing users to the GitHub Bug Bounty program
accordingly.

Signed-off-by: Lessley Dennington <[email protected]>

Author: Lessley Dennington

SECURITY.md

@@ -0,0 +1,8 @@
+# Security
+
+[bug-bounty]: https://hackerone.com/github?type=team
+
+If you discover a security issue in this repo, please submit it through the
+[GitHub Security Bug Bounty program][bug-bounty].
+
+Thanks for helping make open source products on GitHub safe for everyone.