From eea7e3d5c19ca5c7bd7a92feaaae2998545fc7a5 Mon Sep 17 00:00:00 2001
From: Thomas Yu <thomas.yu@sagebase.org>
Date: Mon, 17 Feb 2025 05:29:19 -0800
Subject: [PATCH] Create SECURITY.md

---
 SECURITY.md | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..288d2f85
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+To report a security issue, please email `sagesecurity@sasebase.org` with a description of the
+issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the
+issue. This project follows a 90 day disclosure timeline.