more on security guidelines

.github/ISSUE_TEMPLATE/bug-report.yaml

@@ -8,10 +8,10 @@ body:
       value: |
         > **Warning**
         > Do you experience an unexpected result or a crash?
-        > Please do **NOT** report it as a bug!
+        > Please do **NOT** report it as a bug.
         >
         > Instead, report it as a security issue:
-        > https://flow.com/flow-responsible-disclosure
+        > following the instructions in our [guidelines](../../SECURITY.md) to report it responsibly.
   - type: textarea
     attributes:
       label: Current Behavior

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Report a security vulnerability
+    url: ../../SECURITY.md
+    about: Please review our security policy on how to report security vulnerabilities responsibly.

SECURITY.md

@@ -0,0 +1,10 @@
+
+# Responsible Disclosure Policy
+
+Responsible disclosure of vulnerabilities helps to maintain the security and privacy of everyone.
+
+If you care about making a difference, please follow the guidelines below.
+
+# **Guidelines For Responsible Disclosure**
+
+We ask that all researchers adhere to these guidelines [here](https://flow.com/flow-responsible-disclosure).