Add SECURITY.md (#137)
Mirrors the policy used in modelcontextprotocol/ext-tasks: defers to the main MCP security policy and directs reports to GitHub Security Advisories. Claude-Session: https://claude.ai/code/session_01Sure6Sknngow87Q6TkzTfL Co-authored-by: Claude <noreply@anthropic.com>
This commit is contained in:
parent
5adfff5952
commit
df6691610e
1 changed files with 14 additions and 0 deletions
14
SECURITY.md
Normal file
14
SECURITY.md
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
# Security Policy
|
||||
|
||||
This repository follows the same security policy as the main Model Context Protocol project.
|
||||
|
||||
Please see the [MCP Security Policy](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/SECURITY.md) for full details on reporting security issues, the trust model, and what is considered in scope.
|
||||
|
||||
## Reporting Security Issues
|
||||
|
||||
If you discover a security vulnerability in this repository, please report it through
|
||||
the [GitHub Security Advisory process](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability)
|
||||
for this repository.
|
||||
|
||||
Please **do not** report security vulnerabilities through public GitHub issues, discussions,
|
||||
or pull requests.
|
||||
Loading…
Reference in a new issue