add SECURITY.md

.reuse/dep5

@@ -1,5 +1,5 @@
 Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: imgdoc2
+Upstream-Name: warpaffine
 Upstream-Contact: Carl Zeiss Microscopy GmbH <[email protected]>
 Source: https://github.com/zeissmicroscopy/warpaffine
 

SECURITY.md

@@ -0,0 +1,8 @@
+# Security Policy
+
+Any security issues should be submitted directly through [privately reporting a security vulnerability](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability). In order to determine whether you are dealing with a security issue, ask yourself these two questions:
+
+Can I access something that's not mine, or something I shouldn't have access to?  
+Can I disable something for other people?  
+
+If the answer to either of those two questions are "yes", then you're probably dealing with a security issue. Note that even if you answer "no" to both questions, you may still be dealing with a security issue, so if you're unsure, just follow the instructions linked above.