Initial version, with two TODOs:
1. Where do we want security issues reported to?
2. Someone (a good-first-issue maybe?) needs to go and list out the
gitlint rules in the commit styleguide section
@conradev looking for your thoughts on the first TODO about where to
send security issues.
Signed-off-by: Cara Salter <cara@devcara.com>
