feat:Create SECURITY.md (#848)

Signed-off-by: Thorben Hartmann <122102805+thrbnhrtmnn@users.noreply.github.com>

SECURITY.md

@@ -0,0 +1,24 @@
+# Security Policy
+
+## Supported Versions
+
+Security updates are only applied to the latest published version.
+
+## Reporting a Vulnerability
+
+Please do not disclose security vulnerabilities in public issues, disclosures, or pull requests.
+
+Instead, please send an email to [boiler.security@accenture.com](mailto:boiler.security@accenture.com).
+
+Please include as much of the following information as possible, as it will help us to fix the issue:
+- Issue type (for example cross-site scripting or SQL injection)
+- Affected versions
+- Location of the affected source code
+- Detailed instructions for reproducing the issue step by step
+- Proof-of-concept or exploit code (if available)
+- The potential impact of the issue, outlining how an attacker could exploit it
+
+We will do our best to reply to you within a week.
+
+## Feedback
+If you have feedback or suggestions on how this policy can be improved, please submit a pull request or create a feature request explaining what could be improved.