SECURITY Template
markdown
# Security Policy
## Reporting
Send suspected vulnerabilities to <security contact>.
Include:
- affected component
- reproduction steps
- impact
- suggested mitigation
## Supported Versions
State which versions or branches receive fixes.
## Disclosure
Describe expected response and disclosure handling.
## Secrets And Access
- Never commit secrets to the repository.
- Rotate credentials when exposure is suspected.
- Use least privilege for service and human access.