Create SECURITY.md

SECURITY.md

@@ -0,0 +1,13 @@
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in annotate-lab, please follow these steps:
+
+1. **Do not create a public issue.**
+2. Send an email to annotatelab[at]gmail.com with the following details:
+   - A description of the vulnerability.
+   - The steps to reproduce the vulnerability.
+   - Any potential impact the vulnerability might have.
+3. We will acknowledge the receipt of your report within 10 business days.
+4. We will work with you to understand and address the issue as quickly as possible.
+
+Thank you for helping us keep annotate-lab secure!