doc: create the security policy (#1616)

Author: Quentin Brosse

.github/CONTRIBUTING.md

@@ -15,13 +15,7 @@ This document will cover how to contribute to the project and report issues.
 
 ## Reporting security issues
 
-At Scaleway we take security seriously.
-If you have any issue regarding security, please notify us by sending an email to [security@scaleway.com](mailto:security@scaleway.com).
-
-Please _DO NOT_ create a GitHub issue.
-
-We will follow up with you promptly with more information and a plan for remediation.
-We currently do not offer a paid security bounty program, but we would love to send some Scaleway swag your way along with our deepest gratitude for your assistance in making Scaleway a more secure Cloud ecosystem.
+Please refer to our [security policy](../SECURITY.md).
 
 ## Reporting issues
 

SECURITY.md

@@ -0,0 +1,13 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+At Scaleway we take security seriously. If you have any issue regarding security,
+please notify us by sending an email to security@scaleway.com.
+
+Please DO NOT create a GitHub issue.
+
+We will follow up with you promptly with more information and a plan for remediation.
+We currently do not offer a paid security bounty program, but we would love to send some
+Scaleway swag your way along with our deepest gratitude for your assistance in making
+Scaleway a more secure Cloud ecosystem.