Create SECURITY.md

Author: Mathilde

SECURITY.md

@@ -0,0 +1,19 @@
+# Security Policy
+
+## Supported Versions
+
+Considering the amount of resources necessary to backport security or bug fixes to previous, unsupported CryptPad Helm versions, it's not something we do.
+However, we quickly release new minor versions in case of need.
+
+Please keep up with the latest release published here: https://github.com/cryptpad/helm/releases
+
+Note that every GitHub release page has an RSS compatible feed that you can subscribe on to be informed of every new release.
+
+We do also communicate about this topic on:
+- [Our blog](https://blog.cryptpad.org)
+- [Our Matrix public space](https://matrix.to/#/#cryptpad:matrix.xwiki.com)
+- [Our Mastodon account](https://fosstodon.org/@cryptpad)
+
+## Reporting a Vulnerability
+
+Vulnerabilities can be reported using the GitHub Security interface. You can also send us an email at security@cryptpad.org