Github makes one of those automatically based on SECURITY.md. Signed-off-by: David Anderson <dave@natulte.net>