adding security policy

Signed-off-by: ahmedsobeh <[email protected]>

SECURITY.md

@@ -0,0 +1,7 @@
+## Reporting a Vulnerability
+
+If you believe you've discovered a security vulnerability, please contact the Valkey team at [email protected].
+Please *DO NOT* create an issue.
+We follow a responsible disclosure procedure, so depending on the severity of the issue we may notify Valkey vendors about the issue before releasing it publicly.
+If you would like to be added to our list of vendors, please reach out to the Valkey team at [email protected].
+