[FR] Add SECURITY.md

What's the Problem with Not Having This Feature?

Describe any risks or issues caused by the lack of a SECURITY.md file, such as unclear vulnerability reporting processes or trust concerns for contributors and users.

Describe the Solution You Would Like

Outline what an ideal SECURITY.md should include, such as contact information for reporting vulnerabilities, response time expectations, and any specific security policies.

Describe Alternatives You've Considered

If there are alternative ways to communicate security protocols or vulnerability reporting, list them here for comparison.

Additional Information

Provide any additional context, examples from similar projects, or suggestions that could be helpful when creating SECURITY.md.

In case this issue is accepted I would like to submit a pull request to resolve this issue

assign to me

Resolved by #7221