docs: Update security.md (argoproj#1840)

Signed-off-by: Henrik Blixt <[email protected]>

Author: hblixt

docs/security.md

@@ -1,10 +1,21 @@
-# Security
+# Security Policy for Argo Rollouts
 
 
-## Reporting Vulnerabilities
+## Reporting a Vulnerability
 
-Please report security vulnerabilities by e-mailing:
+If you find a security related bug in Argo Rollouts, we kindly ask you for responsible
+disclosure and for giving us appropriate time to react, analyze and develop a
+fix to mitigate the found security vulnerability.
 
-* [[email protected]](mailto:[email protected])
-* [[email protected]](mailto:[email protected])
-* [[email protected]](mailto:[email protected])
+Please report vulnerabilities by e-mail to the following address: 
+
+* [email protected]
+
+All vulnerabilites and associated information will be treated with full confidentiality. 
+
+## Public Disclosure
+
+We will publish security advisiories using the
+[GitHub Security Advisories](https://github.com/argoproj/argo-rollouts/security/advisories)
+feature to keep our community well informed, and will credit you for your
+findings (unless you prefer to stay anonymous, of course).