Update SECURITY.md

Author: jotak

SECURITY.md

@@ -1,6 +1,13 @@
 # Security Policy
 
+## Supported Versions
+
+All NetObserv components use a single rolling release distribution model. Only the latest version is supported and receives security updates.
+A reported and fixed vulnerability will be included in the next minor or patch release.
+
 ## Reporting a Vulnerability
 
-If you've found a security issue, please do not report it publicly or even fix it publicly. It should be disclosed confidentially to the Red Hat Product Security team.
-Details at https://access.redhat.com/security/team/contact. The maintainers team will do its best to respond in a timely manner.
+To report a vulnerability, please use the [Private Vulnerability Reporting Feature](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability)
+on GitHub. The maintainers team will do its best to respond in a timely manner.
+If a vulnerability is reported but considered low priority it may be converted into an issue and handled on the public issue tracker.
+We may ask for you to collaborate with us on a temporary private fork of the repository.