diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 0000000..2de500e --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,20 @@ +# Security Policy + +## Supported Versions +We currently support the following versions with security updates: + +| Version | Supported | +|---------|------------------| +| 1.0.3 | :white_check_mark: | +| 1.0.2 | :white_check_mark: | + +## Reporting a Vulnerability +If you discover a security vulnerability, please report it privately by emailing [maintainers@pandaswhocode.com](mailto:maintainers@pandaswhocode.com). +Do not create a public issue to disclose the vulnerability. + +We will acknowledge receipt of your report within 48 hours and work on a fix as soon as possible. + +## Security Best Practices +- Follow [GitHub's security best practices](https://docs.github.com/en/code-security). +- Ensure dependencies are up to date. +- Use GitHub Dependabot to monitor vulnerabilities.