feat(KONFLUX-15176): add SECURITY.md for CRA

[nmars]

Summary

• Add SECURITY.md to comply with CRA (EU Cyber Resilience Act) requirements.

Jira: KONFLUX-15176

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 9d721c51-0018-4b81-8d47-b74b8bc56eb5

---

_{Comment @coderabbitai help to get the list of available commands.}

[qodo-for-conforma]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

Tip of the day

💡 Did you know, you can start a comment with 'qodo' or '@qodo' to chat about any finding

More tips ↗ | Customize Qodo ↗ | Qodo docs ↗

[qodo-for-conforma]

PR Summary by Qodo

Add CRA-compliant security reporting guidance

📝 Documentation 🕐 Less than 5 minutes

AI Description

• Adds a repository security policy for Cyber Resilience Act compliance.
• Directs vulnerability and incident reports to Conforma’s centralized security instructions.

High-Level Assessment

Linking to the organization-maintained security policy is appropriate because it keeps reporting instructions centralized and avoids duplicating guidance that could become outdated.

Files changed (1) +5 / -0

Documentation (1) +5 / -0

SECURITY.mdAdd centralized security reporting policy +5/-0

Add centralized security reporting policy

• Adds repository-level guidance for reporting Conforma vulnerabilities or incidents. The document links to the centrally maintained Conforma security policy to support CRA compliance.

SECURITY.md