mention the version tag in SECURITY.md