cherrypick/SECURITY.md

# Reporting Security Issues

If you discover a security issue in Misskey, please report it by sending an
email to [syuilotan@yahoo.co.jp](mailto:syuilotan@yahoo.co.jp).

This will allow us to assess the risk, and make a fix available before we add a
bug report to the GitHub repository.

CherryPick shares security fixes with Misskey.

Thanks for helping make Misskey safe for everyone.