From c7eb607dd19978cdfb2570d1c013a6f9cb865476 Mon Sep 17 00:00:00 2001
From: Naoki Sawada <1412630+nao-pon@users.noreply.github.com>
Date: Sun, 19 Apr 2026 18:51:54 +0900
Subject: [PATCH] Create SECURITY.md

---
 .github/SECURITY.md | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 .github/SECURITY.md

diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644
index 000000000..1b74e8072
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1,36 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in this project, please **do not report it via public GitHub issues**.
+
+Instead, use GitHub's private vulnerability reporting feature:
+
+1. Go to the **Security** tab of this repository
+2. Click **"Report a vulnerability"**
+3. Submit the details privately
+
+This allows us to investigate and fix the issue before public disclosure.
+
+## What to Include
+
+Please include as much information as possible:
+
+- Description of the vulnerability
+- Steps to reproduce
+- Affected versions
+- Potential impact
+- Proof of concept (if available)
+
+## Response Policy
+
+- We will acknowledge your report as soon as possible
+- We will investigate and work on a fix
+- We may ask for additional information if needed
+- We will coordinate responsible disclosure
+
+## Disclosure
+
+Please do not publicly disclose the vulnerability until we have addressed it.
+
+Thank you for helping keep this project secure.