Create SECURITY.md

SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+## Supported Versions
+
+Which versions of the project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| < 1.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Report a vulnerability by [creating an issue](https://github.com/karl-johan-grahn/devopsbot/issues).
+
+Vulnerabilities will be prioritized above all other work.
+
+Expect to get an update on a reported vulnerability within a week of reporting it.
+
+If the vulnerability is accepted, it will be prioritized over all other work.
+
+If the vulnerability is declined, the issue will be closed with a comment including a reason.