# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability, please report it by emailing labgithub@cognizant.com.

**Please do not report security vulnerabilities through public GitHub issues.**

### What to Include

- Description of the vulnerability
- Steps to reproduce the issue
- Potential impact

### What to Expect

- We will acknowledge receipt within 48 hours
- We will provide updates on our progress
- We will work to verify and fix the vulnerability
- We will publicly disclose the issue after a fix is released

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| Latest  | :white_check_mark: |
| < Latest| :x:                |

We recommend always using the latest version of this project.

## Security Best Practices

- Keep your installation up to date
- Never commit secrets or API keys to version control
- Use environment variables for sensitive configuration
- Review dependencies regularly for known vulnerabilities

---

Thank you for helping keep this project secure!
