Add SECURITY docs

[f:10m]

CHANGELOG.md

@@ -2,9 +2,9 @@
 
 ## Unreleased
 
+- Add SECURITY docs
 - Upgrade actions used in workflow
 
-
 ## 2.0.0 - 2023-08-07
 
 - Upgrade nodejs version and all dependencies

SECURITY.md

@@ -0,0 +1,18 @@
+# Security Policy
+
+This project is maintained by Masterworks' Engineering team.
+
+## Supported Versions
+
+We only support the latest major version of this software following the [Semantic Versioning specification](https://semver.org/spec/v2.0.0.html).
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.x.x   | :white_check_mark: |
+| < 1.0   | :x:                |
+
+## Reporting a Vulnerability
+
+If you would like to report a potential security issue in this project, please do not create a GitHub issue.
+
+Instead, send an email to [`[email protected]`](mailto:[email protected]) with the details. We will make sure to review and respond back in a timely manner.