From ccedeba7ec4bb665cd677cfb2af820b185b9c81a Mon Sep 17 00:00:00 2001
From: Vito <vito.sansevero@gmail.com>
Date: Sat, 7 Feb 2026 12:24:54 -0800
Subject: [PATCH] Create SECURITY.md

adding security policy
---
 SECURITY.md | 64 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..ef6f2d9
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,64 @@
+# 🔐 Security Policy
+
+## Supported Versions
+
+Security updates are provided for the actively maintained versions of
+**ComfyUI_PromptManager**.
+
+| Version         | Supported |
+|-----------------|-----------|
+| `main` / latest | ✅        |
+| Older releases  | ❌        |
+
+Users are encouraged to stay up to date with the latest version.
+
+---
+
+## Reporting a Vulnerability
+
+For most security-related issues, **please open a GitHub issue** in this
+repository.
+
+When opening an issue:
+- Clearly describe the problem
+- Include steps to reproduce
+- Mention the affected version or commit
+- Avoid posting secrets, tokens, or private data
+
+### Sensitive Issues
+
+If you believe the issue:
+- Could enable remote code execution
+- Exposes credentials or private data
+- Is actively exploitable in the wild
+
+Please use **GitHub Security Advisories** instead:
+- Go to the **Security** tab
+- Click **Report a vulnerability**
+
+---
+
+## Response Expectations
+
+- Issues are typically reviewed within **a few days**
+- Valid issues will be labeled and tracked publicly
+- Fixes may be discussed openly and merged transparently
+
+---
+
+## Scope
+
+This policy applies to:
+- Code contained in this repository
+- Default configurations and documented usage
+
+It does not cover:
+- Third-party nodes, models, or extensions
+- User workflows, prompts, or local environment issues
+
+---
+
+## Thank You
+
+Community reports and transparency help keep the project healthy.
+Thanks for contributing responsibly.