Create SECURITY.md

SECURITY.md

@@ -0,0 +1,10 @@
+# 🔐 Security Policy
+
+## Supported Versions
+
+Security updates and bug fixes will be only delivered to currently latest major version of SPFx Toolkit VS Code Extension.
+
+## Reporting a Vulnerability
+
+If you found a security vulnerability we would love to hear about it. Please use the [Report a security vulnerability](https://github.com/pnp/vscode-viva/security/advisories/new) issue template so that we may take ASAP action.
+If you found a bug please let us know so that we may fix it ASAP. Please use the [Bug report](https://github.com/pnp/vscode-viva/issues/new?assignees=&labels=%F0%9F%90%9E+bug&projects=&template=bug-report.yml&title=%F0%9F%90%9E+Bug+report%3A+) issue template.