Publish a security policy

[nosborn]

No description provided.

[Copilot]

Pull Request Overview

Adds a new SECURITY.md to outline how vulnerabilities are handled and which versions are supported.

• Introduces a security policy document
• Specifies supported versions and reporting procedure

Comments suppressed due to low confidence (3)

SECURITY.md:1

• [nitpick] Consider adding a short introductory paragraph that explains the objectives and scope of this security policy, giving readers clearer context on what’s covered.

# Security Policy

SECURITY.md:5

• The phrase “best-efforts” is vague—consider specifying which past versions (if any) receive patches and defining a clear support window for security fixes.

Support is provided on a best-efforts basis for the [latest version](https://github.com/nosborn/github-action-markdown-cli/releases/latest) only.

SECURITY.md:9

• [nitpick] Consider adding details on expected response timelines, severity classification, and disclosure process to set clear expectations for security reporters.

Please open a draft [GitHub Security Advisory](https://github.com/nosborn/github-action-markdown-cli/security/advisories/new).

[Copilot]

[nitpick] Recommend providing an alternative secure contact method (e.g., encrypted email address or PGP key) for reporters who cannot use GitHub’s advisory feature directly.

Suggested change

	Please open a draft [GitHub Security Advisory](https://github.com/nosborn/github-action-markdown-cli/security/advisories/new).
	Please open a draft [GitHub Security Advisory](https://github.com/nosborn/github-action-markdown-cli/security/advisories/new).
	Alternatively, if you cannot use GitHub's advisory feature, you can contact us securely via encrypted email:
	- **Email:** security@example.com
	- **PGP Public Key:** [Download here](https://example.com/pgp-key.asc)
	- **Fingerprint:** 1234 5678 9ABC DEF0 1234 5678 9ABC DEF0 1234 5678
	Please use the PGP key to encrypt any sensitive information before sending.