Add details to the disclosure policy

Author: xcorail

docs/report-template.md

@@ -46,12 +46,12 @@ When you use a GitHub Security Advisory, you can request a CVE identification nu
 ## Credit
 
 *List all researchers who contributed to this disclosure.*
-*Mention if you found the vulnerability with a specific tool.*
+*If you found the vulnerability with a specific tool, you can also credit this tool.*
 
 ## Contact
 
 [contact]
 
 ## Disclosure Policy
 
-*Describe or link to your disclosure policy.*
+*Describe or link to your disclosure policy. It's important to have a disclosure policy where the public disclosure deadline, and the potential exceptions to it, are clear. You are free to copy and use the [GitHub Security Lab disclosure policy](https://securitylab.github.com/advisories/#policy).*