From 1871076d09a1cd1a2c1084f36d8d70582f866754 Mon Sep 17 00:00:00 2001
From: Nicola Murino <nicola.murino@gmail.com>
Date: Mon, 6 Oct 2025 14:20:34 +0200
Subject: [PATCH] add security policy

---
 SECURITY.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..563cbeee
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+Security updates are provided for the latest released version of this package.
+We also welcome vulnerability reports for the development version to help us ensure it is secure before the next release.
+
+## Reporting a Vulnerability
+
+If you believe you’ve found a security vulnerability in this project, we strongly encourage you to report it privately using GitHub’s [security advisory system]((https://github.com/pkg/sftp/security/advisories/new).
+This will allow us to review and address the issue before public disclosure.  
+
+Thank you for helping us keep the project secure.