diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..9c7497c --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,32 @@ +# Security Policy + +## Reporting Security Issues + +**DO NOT report security vulnerabilities via public GitHub issues.** + +Instead, please report them by emailing security@fastapi-admin-kit.com with: + +- A detailed description of the vulnerability +- Steps to reproduce the issue +- Potential impact and affected versions +- Any proof-of-concept code (if applicable) + +## What to Include + +Please include the following in your report: + +1. **Vulnerability type** (e.g., XSS, SQL injection, authentication bypass, etc.) +2. **Affected components** or endpoints +3. **Steps to reproduce** +4. **Expected vs. actual behavior** +5. **Environment details** (OS, Python version, framework version) +6. **Suggested fix** (optional but appreciated) + + +## Security Policy + +This project follows responsible disclosure. We will: + +- Credit reporters in the release notes (unless requested otherwise) +- Fix security issues in a timely manner +- Publish security advisories via the GitHub Security tab \ No newline at end of file