added security file

[cb-gaganbankey]

CHANGELOG

REPLACE_ME_WITH_CHANGELOG

SUMMARY

REPLACE_ME_WITH_SUMMARY_OF_THE_CHANGES

FUNCTIONAL AUTOMATION CHANGES PR

• Yes
  • If Yes, PR :
• No
  • If No, Reason:

AUTOMATION TEST REPORT URL

REPLACE_ME_WITH_TEST_REPORT_URL

AREAS OF IMPACT

REPLACE_ME_WITH_AREAS_OF_IMPACT_OR_NA

TYPE OF CHANGE

• 🐞 Bugfix
• 🌟 Feature
• ✨ Enhancement
• 🧪 Unit Test Cases
• 📔 Documentation
• ⚙️ Chore - Build Related / Configuration / Others

DOCUMENTATION

REPLACE_ME_WITH_DOCUMENTATION_LINK_OR_NA

Added SECURITY.md with vulnerability disclosure guidance, reporting instructions, and a restriction against public GitHub reports.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues
✅	Secrets	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: d75052b1-5126-415a-8fe1-a0ca3a2b7153

📥 Commits

Reviewing files that changed from the base of the PR and between 837e5db and 75035d7.

📒 Files selected for processing (1)

• SECURITY.md

---

Walkthrough

Added SECURITY.md with Chargebee’s security commitment, responsible disclosure policy link, vulnerability reporting email, and instructions against public GitHub reports.

Changes

Security Policy

Layer / File(s)	Summary
Security policy documentation SECURITY.md	Documents responsible vulnerability disclosure, provides reporting instructions, and prohibits public GitHub issues or pull requests for security reports.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 75035

This is a localized documentation change, and no actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 1

✅ Passed checks (1 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

---

_{Comment @coderabbitai help to get the list of available commands.}