Added SECURITY.md file

Signed-off-by: Alberto Codutti <alberto.codutti@eurotech.com>

SECURITY.md

@@ -0,0 +1,19 @@
+# Security Policy
+
+This project implements the [Eclipse Foundation Security Policy](https://www.eclipse.org/security).
+
+### Reporting a Vulnerability
+
+Please report vulnerabilities to the Eclipse Foundation Security Team at
+[security@eclipse.org](mailto:security@eclipse.org)
+
+### Supported Versions
+
+The Eclipse Kapua project provides security updates for the last two major releases (currently we have only one major).
+
+The fixes are applied to the latest minor release available for the given major and will produce a new service release.
+
+| Version         | Last Release                                                 | Supported          |
+|-----------------|--------------------------------------------------------------|--------------------|
+| 1.6.x           | [1.6.2](https://github.com/eclipse/kapua/releases/tag/1.6.2) | :white_check_mark: |
+| 1.5.x and below | [1.5.5](https://github.com/eclipse/kapua/releases/tag/1.5.5) | :x:                |