Merge "Add SECURITY.md"

.github/SECURITY.md

@@ -0,0 +1,9 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+The Airship community is committed to expediently confirming, resolving, and
+disclosing all reported security vulnerabilities. To report a security
+vulnerabillity, please refer to our [vulnerability management process][1].
+
+[1]: https://airship-docs.readthedocs.io/en/latest/security/vulnerabilities.html