From d0f32c0a2b0ac841b0956d599ab7303c81e5fbc4 Mon Sep 17 00:00:00 2001
From: Daniel Rudolf <github.com@daniel-rudolf.de>
Date: Mon, 21 Jun 2021 20:45:31 +0200
Subject: [PATCH] Create SECURITY.md

---
 SECURITY.md | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..d320d34
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,15 @@
+# Security Policy
+
+## Supported Versions
+
+Only the most recent stable version of Pico is supported.
+
+## Reporting a Vulnerability
+
+To mitigate the impact of possible security issues we ask you to disclose any security issues with Pico privately first ("responsible disclosure"). To do so please send an email to Pico's lead developer:
+
+> Daniel Rudolf \<picocms.org@daniel-rudolf.de\>
+
+You should receive an answer within 48 hours.
+
+All messages with valid security reports will be puslished on GitHub in full text.