Update the security with more details on the procedure and also add GitHub's security advisory page as possibility to report a vulnerability.