From ff2f95d4f2d605acac3a1b86405ae4f01ad7306f Mon Sep 17 00:00:00 2001 From: Dan Noble Date: Tue, 11 Aug 2026 11:55:20 -0700 Subject: [PATCH] Add SECURITY.md with policy for private security reports --- SECURITY.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..f722272 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,14 @@ +# Security Policy + +## Reporting a Vulnerability + +Please report any security vulnerabilities by emailing us at [support@datacommons.org](mailto:support@datacommons.org). Please do not open a public issue or pull request. + +### What to Include in the Report + +To help us address the issue as quickly as possible, please include the following details in your report: +- A description of the vulnerability and its potential impact. +- Step-by-step instructions (or a proof-of-concept script) to reproduce the issue. +- Any details about the environment or configuration where the issue was found. + +We appreciate your help in keeping Data Commons secure!