Create SECURITY.md

SECURITY.md

@@ -0,0 +1,20 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 6.4.x   | :white_check_mark: |
+
+## Reporting a Vulnerability
+
+If you think you have found a vulnerability in <project> you can report it using one of the following ways:
+
+* Contact the [Eclipse Foundation Security Team](mailto:[email protected])
+* [Report a Vulnerability](https://github.com/eclipse-threadx/guix/security/advisories/new)
+
+You can find more information about reporting and disclosure at the [Eclipse Foundation Security page](https://www.eclipse.org/security/).
+
+## Security Policy
+
+This project follows [Eclipse Foundation Vulnerability Reporting Policy](https://www.eclipse.org/security/policy/).