Merge pull request #6 from Chinyemba-ck/add-security-policy

Add SECURITY.md file with vulnerability reporting guidelines

Author: Chinyemba-ck

SECURITY.md

@@ -0,0 +1,16 @@
+## Security Policy
+
+### Reporting a Vulnerability
+
+We take the security of Hyphae seriously. We appreciate your efforts to
+responsibly disclose security vulnerabilities. If you believe you have found
+a security issue, please **DO NOT** open a public issue or pull request.
+
+Instead, security concerns should be communicated via email to:
+**hyphae@lfenergy.org**
+
+**The email should include:**
+
+- A clear description of the vulnerability
+- Steps to reproduce the vulnerability
+- The affected version(s) of the project