Add security.yml and SECURITY.md (#2630)

.github/workflows/dynamic-security.yml

@@ -0,0 +1,19 @@
+name: update-security
+
+on:
+  push:
+    paths:
+      - SECURITY.md
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  update-security:
+    permissions:
+      contents: write
+      pull-requests: write
+      pages: write
+    uses: thoughtbot/templates/.github/workflows/dynamic-security.yaml@main
+    secrets:
+      token: ${{ secrets.GITHUB_TOKEN }}

SECURITY.md

@@ -1,14 +1,2 @@
-# Security Policy
-
-## Supported Versions
-
-Only the the latest version of Administrate is supported at a given time. If you find
-a security issue with an older version, please try updating to the latest version first.
-
-If for some reason you can't update to the latest version, please let us know your reasons
-so that we can have a better understanding of your situation.
-
-## Reporting a Vulnerability
-
-For security inquiries or vulnerability reports, please email [email protected].
-If you'd like, you can use our PGP key when reporting vulnerabilities.
+<!-- START /templates/security.md -->
+<!-- END /templates/security.md -->