add tidelift security policy

asottile · web-flow · commit 034e3d26ca6f · 2022-08-01T16:29:32.000-04:00
diff --git a/.github/SECURITY.md b/.github/SECURITY.md
@@ -0,0 +1,5 @@
+## security contact information
+
+to report a security vulnerability, please use the
+[Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure.
