Update SECURITY.md

[glenn-jocher]

🛠️ PR Summary

_{Made with ❤️ by Ultralytics Actions}

🌟 Summary

Enhanced security documentation with additional FAQs detailing key security measures like Snyk, CodeQL, and Dependabot, plus improved badge linkage.

📊 Key Changes

• Updated CodeQL badge link to reflect the correct workflow path.
• Added a FAQ section explaining:
  • Security measures implemented (e.g., Snyk, CodeQL, Dependabot).
  • How specific tools like Snyk and CodeQL work to protect projects.
  • Private vulnerability reporting process for secure issue disclosure.

🎯 Purpose & Impact

• Improved Clarity: Provides clear, detailed explanations of Ultralytics’ security practices.
• Enhanced Transparency: Reassures users and contributors by showcasing proactive security tools and workflows 🔒.
• Actionable Insights: Empowers users to safely report vulnerabilities, fostering a collaborative and secure environment.

Deepened documentation ensures trust, security, and practical guidance for users and developers alike! 🎉

[UltralyticsAssistant]

👋 Hello @glenn-jocher, thank you for submitting an ultralytics/.github 🚀 PR! To ensure a seamless integration of your work, please review the following checklist:

• ✅ Define a Purpose: Clearly explain the purpose of your fix or feature in your PR description, and link to any relevant issues. Ensure your commit messages are clear, concise, and adhere to the project's conventions.
• ✅ Synchronize with Source: Confirm your PR is synchronized with the ultralytics/.github main branch. If it's behind, update it by clicking the 'Update branch' button or by running git pull and git merge main locally.
• ✅ Ensure CI Checks Pass: Verify all Ultralytics Continuous Integration (CI) checks are passing. If any checks fail, please address the issues.
• ✅ Update Documentation: Update the relevant documentation for any new or modified features.
• ✅ Add Tests: If applicable, include or update tests to cover your changes, and confirm that all tests are passing.
• ✅ Sign the CLA: Please ensure you have signed our Contributor License Agreement if this is your first Ultralytics PR by writing "I have read the CLA Document and I sign the CLA" in a new message.
• ✅ Minimize Changes: Limit your changes to the minimum necessary for your bug fix or feature addition. "It is not daily increase but daily decrease, hack away the unessential. The closer to the source, the less wastage there is." — Bruce Lee

For more guidance, please refer to our Contributing Guide. Don’t hesitate to leave a comment if you have any questions. Thank you for contributing to Ultralytics! 🚀

This is an automated response, but rest assured that an Ultralytics engineer will review your PR and provide further feedback soon. 😊