feat: add security.md to all repos (#41)

.github/sync-files.yml

@@ -38,3 +38,39 @@ group:
       googlemaps/js-ogc
       googlemaps/js-polyline-codec
       googlemaps/js-three
+  # Add SECURITY.md to all repositories
+  - files:
+      - source: SECURITY.md
+        dest: SECURITY.md
+    # gh repo list googlemaps --public --source --no-archived  --json name | jq '.[] | .name'
+    repos: |
+      googlemaps/.github
+      googlemaps/android-maps-ktx
+      googlemaps/android-maps-rx
+      googlemaps/android-maps-utils
+      googlemaps/android-on-demand-rides-deliveries-samples
+      googlemaps/android-places-demos
+      googlemaps/android-places-ktx
+      googlemaps/android-samples
+      googlemaps/deck.gl-demos
+      googlemaps/go-routespreferred
+      googlemaps/google-maps-ios-utils
+      googlemaps/google-maps-services-java
+      googlemaps/google-maps-services-js
+      googlemaps/google-maps-services-python
+      googlemaps/js-api-loader
+      googlemaps/js-jest-mocks
+      googlemaps/js-markerclusterer
+      googlemaps/js-markerclustererplus
+      googlemaps/js-markermanager
+      googlemaps/js-markerwithlabel
+      googlemaps/js-ogc
+      googlemaps/js-polyline-codec
+      googlemaps/js-samples
+      googlemaps/js-three
+      googlemaps/js-types
+      googlemaps/maps-sdk-for-ios-samples
+      googlemaps/openapi-specification
+      googlemaps/playablelocations-proxy
+      googlemaps/react-wrapper
+      googlemaps/semantic-release-config

SECURITY.md

@@ -0,0 +1,10 @@
+# Report a security issue
+
+To report a security issue, please use https://g.co/vulnz. We use
+https://g.co/vulnz for our intake, and do coordination and disclosure here on
+GitHub (including using GitHub Security Advisory). The Google Security Team will
+respond within 5 working days of your report on g.co/vulnz.
+
+To contact us about other bugs, please open an issue on GitHub.
+
+> **Note**: This file is synchronized from the https://github.com/googlemaps/.github repository.