Add SECURITY.md file as required now by upstream

YP now requires this file to be present. Add it.

Bug-AGL: SPEC-5309
Change-Id: I11aee7f62e85e35298aad47e5daeee16b0026ab0
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/30549
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Tested-by: Jenkins Job builder account

1 files changed, 19 insertions, 0 deletions

diff --git a/meta-app-framework/SECURITY.md b/meta-app-framework/SECURITY.md
new file mode 100644
index 000000000..a3c80fdd3
--- /dev/null
+++ b/meta-app-framework/SECURITY.md
@@ -0,0 +1,19 @@
+How to Report a Potential Vulnerability?
+========================================
+
+If you would like to report a public issue (for example, one with a released
+CVE number), please report it to security AT automotivelinux DOT org 
+
+If you are dealing with a not-yet released or urgent issue, please send a
+message to security AT automotivelinux DOT org, including as many details as
+possible: the layer or software module affected, the recipe and its version,
+and any example code, if available.
+
+Branches maintained with security fixes
+---------------------------------------
+
+See [https://wiki.automotivelinux.org/schedule this page]
+for detailed info regarding the policies and maintenance of Stable branches.
+
+The [https://wiki.automotivelinux.org/agl-distro/release-notes Release page]
+contains a list of all releases of Automotive Grade Linux.