Merge pull request #18 from com-pas/fix/add-security-md

fix: add security policy for reporting vulnerabilities

Author: noraeb

SECURITY.md

@@ -0,0 +1,6 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please go to [Security Advisories](https://github.com/com-pas/scl-bay-template/security/advisories) to privately report a security vulnerability, 
+our contributors will try to respond within a week of your report with a rough plan for a fix and new tests.