From c227a33ceb5059c055732ef1d4d64971a8d0e7af Mon Sep 17 00:00:00 2001 From: prachizala Date: Sun, 8 Nov 2026 21:11:34 +0530 Subject: [PATCH] docs: establish security vulnerability disclosure policy Documents the vulnerability disclosure guidelines and supported version matrix. Co-authored-by: Claude --- SECURITY.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..758639d --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,17 @@ +# Security Policy + +## Supported Versions +| Version | Supported | +| ------- | ------------------ | +| 1.0.x | :white_check_mark: | +| < 1.0 | :x: | + +## Reporting a Vulnerability +We take the security of Distributed Task Engine seriously. If you discover a vulnerability, please do NOT disclose it in public issues. + +Please send an email to `prachizala2003@gmail.com` with: +- Description of the vulnerability and attack vector +- Steps to reproduce or proof-of-concept payload +- Potential impact and affected endpoints + +We acknowledge reports within 48 hours and provide patches as quickly as possible.