Add SECURITY.md with vulnerability reporting and disclosure policy

[iAnonymous3000]

This introduces a SECURITY.md file to the project, outlining the OWASP dep-scan security policy. The file covers the following key points:

• Supported versions and commitment to providing security updates
• Instructions for reporting vulnerabilities to the project maintainer
• Overview of the vulnerability management process
• Statement on the current absence of a bug bounty program
• Secure development practices followed by the project
• Placeholder for acknowledging responsible vulnerability disclosures

The main contact for reporting vulnerabilities is listed as [email protected].

This policy demonstrates the project's commitment to maintaining a secure codebase and handling vulnerability reports responsibly. It provides guidance to security researchers and users on how to engage with the project for security-related concerns.

Please feel free to modify it in any way that you believe is suitable.

[prabhu]

@iAnonymous3000 Thank you for this contribution! I think the content needs some changes. Will do it later.

At the moment, we treat security issues as any other issues.