Create SECURITY.md for security policy

[trewc456-ai]

Added a security policy document outlining supported versions and vulnerability reporting.

Summary by CodeRabbit

• Documentation
  • Added a security policy page with supported version information.
  • Included guidance for reporting vulnerabilities and what to expect during the review process.

[coderabbitai]

📝 Walkthrough

Walkthrough

A new SECURITY.md file is added to the repository, containing a security policy with a supported versions table and instructions for reporting vulnerabilities.

Changes

Security policy documentation

Layer / File(s)	Summary
Add security policy SECURITY.md	New document with a supported versions table and vulnerability reporting instructions.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested labels: documentation

Suggested reviewers: N/A

Poem:
A rabbit hops with a new decree,
"Report the bugs, come talk to me!"
A table of versions, neat and small,
SECURITY.md now guards them all.
No code was touched, no logic bent,
Just a policy, kindly sent. 🐇🔒

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: adding SECURITY.md with a security policy.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@SECURITY.md`:
- Around line 5-13: The supported-versions section in SECURITY.md is still
placeholder text and should be replaced with the project’s real security support
policy. Update the table or guidance to reflect the authoritative release matrix
for this project, and ensure the wording in the supported-versions section
clearly identifies which versions receive security fixes.
- Around line 17-21: The vulnerability-reporting section is still placeholder
text and needs concrete reporting instructions; update the SECURITY.md guidance
to tell reporters exactly where to submit vulnerabilities, what details to
include, and what response timeline to expect. Replace the generic copy with
specific reporting and follow-up expectations in the security reporting section
so the policy is complete.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ebf3d3e7-f7c0-4457-87c3-4567e03694ce

📥 Commits

Reviewing files that changed from the base of the PR and between e3dfe8b and 4447cec.

📒 Files selected for processing (1)

• SECURITY.md

[trewc456-ai]

Verified