github has special support for that name: https://help.github.com/en/articles/adding-a-security-policy-to-your-repository.
Zbigniew Jędrzejewski-Szmek