# Security policy

A step of the [Open source library](https://gradus.kazet.blog/tree/open-source-library) tree on Gradus, in the Community area: Templates, conduct, security.

Page: https://gradus.kazet.blog/tree/open-source-library/step/security-policy

Publish how to report a vulnerability privately and which versions receive fixes.

Usually comes after: [Issue and PR templates](https://gradus.kazet.blog/tree/open-source-library/step/issue-templates).

## Prompt for your AI assistant

```
Add SECURITY.md stating which versions receive security fixes, how to report a vulnerability privately (a security advisory or a dedicated address) and the expected response time. Enable private vulnerability reporting on the repository if the host supports it.
```

Every step of the tree: https://gradus.kazet.blog/tree/open-source-library/llms.txt