Merge pull request #1733 from Yamato-Security/add-security-md

add security.md

Author: YamatoSecurity

SECURITY.md

@@ -0,0 +1,25 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please privately report security vulnerabilities using GitHub's Security reporting feature. 
+
+https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/report-a-vulnerability/privately-reporting-a-security-vulnerability
+
+We prefer vulnerability reports to be accompanied by:
+- Proof of concept (PoC) that demonstrates the vulnerability
+
+Thank you!
+
+# セキュリティポリシー
+
+## 脆弱性の報告について
+
+脆弱性は、GitHubの脆弱性の報告機能を使用して非公開でご報告ください。
+
+https://docs.github.com/ja/code-security/how-tos/report-and-fix-vulnerabilities/report-a-vulnerability/privately-reporting-a-security-vulnerability
+
+脆弱性報告には、可能であれば以下の情報を添えていただけると助かります。
+- 脆弱性を再現できる PoC（Proof of Concept）
+
+ご協力ありがとうございます。