feat(KONFLUX-15176): add SECURITY.md for CRA

[nmars]

Summary

• Add SECURITY.md to comply with CRA (EU Cyber Resilience Act) requirements.

Jira: KONFLUX-15176

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 51001c58-b7d2-4072-82fa-65b28ab7642d

---

_{Comment @coderabbitai help to get the list of available commands.}

[qodo-for-conforma]

PR Summary by Qodo

Add CRA-compliant security reporting guidance

📝 Documentation 🕐 Less than 5 minutes

AI Description

• Adds a security policy directing vulnerability and incident reports to Conforma guidance.
• Supports EU Cyber Resilience Act compliance requirements.

High-Level Assessment

Linking to the centralized Conforma security policy is appropriate because it avoids duplicating reporting instructions that could become inconsistent or outdated. A local copy was considered unnecessary for this documentation-only compliance change.

Files changed (1) +5 / -0

Documentation (1) +5 / -0

SECURITY.mdAdd centralized security reporting guidance +5/-0

Add centralized security reporting guidance

• Adds a repository security policy that directs vulnerability and incident reporters to Conforma's centrally maintained instructions, supporting CRA compliance.

SECURITY.md

[qodo-for-conforma]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

Tip of the day

💡 Did you know, you can start a comment with 'qodo' or '@qodo' to chat about any finding

More tips ↗ | Customize Qodo ↗ | Qodo docs ↗