Merge pull request #169 from metal3-cherrypick-bot/cherry-pick-165-to-release-1.2

🌱 add SECURITY_CONTACTS file

Author: metal3-io-bot

SECURITY_CONTACTS

@@ -0,0 +1,14 @@
+# Reporting a security vulnerability
+
+Please do:
+  - not disclose any security issue publicly e.g. Pull Requests, Comments.
+  - not disclose any security issue directly to any owner of the repository or
+    to any other contributor.
+
+In this repository security reports are handled according to the
+Metal3-io project's security policy. For more information about the security
+policy consult the User-Guide [here](https://metal3io.netlify.app/security_policy.html).
+
+Security vulnerability fixes can be ported to the currently supported release branches,
+more about the supported releases can be found [here](https://metal3io.netlify.app/version_support.html).
+