Update SECURITY.md (#3458)

* Update SECURITY.md

update security.md to direct vulnerability reports to github.com/OSC/ondemand/security

* Update SECURITY.md

fixed a typo

SECURITY.md

@@ -6,8 +6,12 @@ project.
 ## Reporting a Vulnerability
 
 If you have security concerns or think you have found a vulnerability in Open OnDemand,
-please contact us directly via [[email protected]](mailto:[email protected]).
-Emails sent to it are only seen by the core project team.
+please submit a private report by visiting the 'Security' section of our GitHub located at [github.com/OSC/ondemand/security/](https://github.com/OSC/ondemand/security/) 
+and clicking 'Report a vulnerability'. 
+
+If you have questions about Open OnDemand's security, or have issues submitting a report please 
+contact us directly via [[email protected]](mailto:[email protected]).
+Emails sent there are only seen by the core project team.
 
 ## Disclosure Policy