SECURITY.md in macaw_framework-1.0.1 vs SECURITY.md in macaw_framework-1.0.2

- old
+ new

@@ -1,13 +1,27 @@ # Security Policy ## Supported Versions +We are committed to addressing security issues in a timely manner. The following versions of MacawFramework are currently supported with security updates: + | Version | Supported | | ------- | ------------------ | | 1.0.x | :white_check_mark: | | < 1.x | :x: | - ## Reporting a Vulnerability -If you find a vulnerability, please open an issue or send an e-mail to aria.diniz.dev@gmail.com +We encourage responsible disclosure of security vulnerabilities. If you find a vulnerability in MacawFramework, please follow the steps below: + +1. Open an issue on the [GitHub repository](https://github.com/ariasdiniz/macaw_framework/issues) describing the vulnerability. Please include as much detail as possible, such as the affected version, the steps to reproduce the issue, and the potential impact of the vulnerability. + +Alternatively, you can send an email to aria.diniz.dev@gmail.com with the same information. + +2. We will review and acknowledge the report within a reasonable time frame. We may ask for additional information or guidance to help us understand and reproduce the issue. + +3. We will work on addressing the vulnerability and will provide updates on the progress. + +4. Once the issue is resolved, we will release a new version of MacawFramework with the necessary security fixes. + +Please remember to follow the project's [Code of Conduct](https://github.com/ariasdiniz/macaw_framework/blob/main/CODE_OF_CONDUCT.md) when reporting security vulnerabilities. +