github requires markdown for security policy (#305)

Author: rscohn2

README.rst

@@ -166,7 +166,7 @@ See also
 `Security`_
   Security policy
 
-.. _`Security`: security.rst
+.. _`Security`: SECURITY.md
 .. _`Testing`: doc/developer/testing
 .. _`pre-commit`: doc/developer/testing/pre-commit.rst
 .. _`Spec Editing`: doc/spec/README.rst

SECURITY.md

@@ -0,0 +1,16 @@
+<!--
+SPDX-FileCopyrightText: Intel Corporation
+
+SPDX-License-Identifier: BSD-3-Clause
+-->
+
+# Security Policy
+
+Intel is committed to rapidly addressing security vulnerabilities
+affecting our customers and providing clear guidance on the solution,
+impact, severity and mitigation.
+
+## Reporting a Vulnerability
+
+Please report any security vulnerabilities in this project
+[utilizing the guidelines here](https://www.intel.com/content/www/us/en/security-center/vulnerability-handling-guidelines.html).