This pr adds security.md and introduces a policy enabling users to re…

…port security issues. (#18)

CODEOWNERS

@@ -0,0 +1 @@
+*               @canonical/kubernetes

SECURITY.md

@@ -1,2 +1,15 @@
-This is a OpenEBS sub project and abides by the 
-[OpenEBS Security Release Process](https://github.com/openebs/openebs/blob/master/SECURITY.md).
+# Security Policy
+
+## Reporting a Vulnerability
+
+To report a security issue, please follow the steps below:
+
+Using GitHub, file a [Private Security Report](https://github.com/canonical/rawfile-localpv/security/advisories/new) with:
+- A description of the issue
+- Steps to reproduce the issue
+- Affected versions of the `rawfile-localpv` package
+- Any known mitigations for the issue
+
+The [Ubuntu Security disclosure and embargo policy](https://ubuntu.com/security/disclosure-policy) contains more information about what to expect during this process and our requirements for responsible disclosure.
+
+Thank you for contributing to the security and integrity of the `rawfile-localpv`!