supabase / mcp / 40676491998

98%

push

github

docs: Add SECURITY.md (#489)

## What kind of change does this PR introduce?

Adds a SECURITY.md file so we can get better signal on our security
reports.

## What is the current behavior?

Agents and researchers send us reports that are invalid or out of scope.

## What is the new behavior?

Agents read the SECURITY.md and send us better security reports.

## How to Review

1. Determine if incorrect assumptions in what is a vulnerability and
what is not a vulnerability sections.

## Verification

N/A

## Additional context

[Linear
Issue](https://linear.app/supabase/issue/SEC-993/securitymd-to-guide-researchers)

1063 of 1120 branches covered (94.91%)

Branch coverage included in aggregate %.

5648 of 5755 relevant lines covered (98.14%)

168.86 hits per line