SECURITY.md in macaw_framework-1.0.1 vs SECURITY.md in macaw_framework-1.0.2
- old
+ new
@@ -1,13 +1,27 @@
# Security Policy
## Supported Versions
+We are committed to addressing security issues in a timely manner. The following versions of MacawFramework are currently supported with security updates:
+
| Version | Supported |
| ------- | ------------------ |
| 1.0.x | :white_check_mark: |
| < 1.x | :x: |
-
## Reporting a Vulnerability
-If you find a vulnerability, please open an issue or send an e-mail to aria.diniz.dev@gmail.com
+We encourage responsible disclosure of security vulnerabilities. If you find a vulnerability in MacawFramework, please follow the steps below:
+
+1. Open an issue on the [GitHub repository](https://github.com/ariasdiniz/macaw_framework/issues) describing the vulnerability. Please include as much detail as possible, such as the affected version, the steps to reproduce the issue, and the potential impact of the vulnerability.
+
+Alternatively, you can send an email to aria.diniz.dev@gmail.com with the same information.
+
+2. We will review and acknowledge the report within a reasonable time frame. We may ask for additional information or guidance to help us understand and reproduce the issue.
+
+3. We will work on addressing the vulnerability and will provide updates on the progress.
+
+4. Once the issue is resolved, we will release a new version of MacawFramework with the necessary security fixes.
+
+Please remember to follow the project's [Code of Conduct](https://github.com/ariasdiniz/macaw_framework/blob/main/CODE_OF_CONDUCT.md) when reporting security vulnerabilities.
+