From 79285a4c003a44865bc4d530495d9efbbc3df2fc Mon Sep 17 00:00:00 2001
From: Shiva Vinodkumar <127319648+shiva24082@users.noreply.github.com>
Date: Thu, 2 Jul 2026 17:57:40 +0530
Subject: [PATCH] Add/Update SECURITY.md to improve repository standards

---
 SECURITY.md | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..c24335d
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,11 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest stable release builds are supported with security patches.
+
+## Reporting a Vulnerability
+
+If you identify a security vulnerability in caveman (such as arbitrary shell execution, workspace folder escapes, token/credentials hijack via prompts, or malicious JSON parsing flaws in extension settings), please do **not** open a public issue.
+
+Please report vulnerabilities privately by emailing the maintainers or using GitHub's private vulnerability reporting feature.