[skip ci]
Open Source program office guidelines encourage us to add this information to our repository. So I'm doing it. Sourced from https://github.com/microsoft/microsoft.github.io/blob/master/SECURITY.MD