Add SECURITY.md (#137)

Mirrors the policy used in modelcontextprotocol/ext-tasks: defers to the
main MCP security policy and directs reports to GitHub Security Advisories.


Claude-Session: https://claude.ai/code/session_01Sure6Sknngow87Q6TkzTfL

Co-authored-by: Claude <noreply@anthropic.com>
This commit is contained in:
Peter Alexander 2026-09-16 05:58:51 +01:00 • committed by GitHub
commit df6691610e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

14
SECURITY.md Normal file
View file

@ -0,0 +1,14 @@
# Security Policy
This repository follows the same security policy as the main Model Context Protocol project.
Please see the [MCP Security Policy](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/SECURITY.md) for full details on reporting security issues, the trust model, and what is considered in scope.
## Reporting Security Issues
If you discover a security vulnerability in this repository, please report it through
the [GitHub Security Advisory process](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability)
for this repository.
Please **do not** report security vulnerabilities through public GitHub issues, discussions,
or pull requests.