chore: add SECURITY.md (#1931)

google-cloud-policy-bot[bot] · web-flow · commit d9e5e55f37cf · 2021-04-27T17:20:11.000Z
add a security policy
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+To report a security issue, please use [g.co/vulnz](https://g.co/vulnz).
+
+The Google Security Team will respond within 5 working days of your report on g.co/vulnz.
+
+We use g.co/vulnz for our intake, and do coordination and disclosure here using GitHub Security Advisory to privately discuss and fix the issue.
