# Security Policy

## Supported Versions

Currently, we provide security updates for these versions:

| Version | Supported          |
| ------- | ------------------ |
| 0.0.1   | :white_check_mark: |

## Reporting a Vulnerability

We take the security of Plan-Linter seriously. If you believe you've found a security vulnerability, please follow these steps:

1. **Do NOT disclose the vulnerability publicly** (no GitHub issues for security vulnerabilities)
2. Email us at security@your-organization.com with details about the vulnerability
3. Include steps to reproduce, impact, and any potential mitigations you've identified
4. We will acknowledge receipt of your report within 48 hours

## What to Expect

- We'll acknowledge your email within 48 hours
- We'll provide an initial assessment of the report within 7 days
- We'll work with you to understand and validate the issue
- We'll develop and release a fix according to our severity assessment
- We'll publicly disclose the issue after a fix is available (crediting you if desired)

## Security Best Practices for Users

- Keep Plan-Linter updated to the latest version
- Carefully review policy files before using them in production
- Use dedicated service accounts with appropriate permissions when integrating Plan-Linter
- Regularly audit your agent plans for security issues 