docs: add SECURITY.md (#169)

Signed-off-by: moxiaoying <1159230165@qq.com>
Co-authored-by: Zhangjian He <hezhangjian97@gmail.com>

Author: CennyMo

SECURITY.md

@@ -0,0 +1,9 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you have apprehensions regarding OpenGemini's security or you discover vulnerability or potential threat, don’t hesitate to get in touch with us by dropping a mail at opengemini-private@googlegroups.com.
+
+In the mail, specify the description of the issue or potential threat. You are also urged to recommend the way to reproduce and replicate the issue. The OpenGemini community will get back to you after assessing and analysing the findings.
+
+PLEASE PAY ATTENTION to report the security issue on the security email before disclosing it on public domain.