From 2d1f2eab342a9e1be309184beca61bc5cc1f71e9 Mon Sep 17 00:00:00 2001
From: Alexandra Dragodan
 <115644805+alexandradragodan@users.noreply.github.com>
Date: Mon, 15 May 2023 21:21:19 +0300
Subject: [PATCH] Create SECURITY.md

---
 SECURITY.md | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..6030fb1c0
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,11 @@
+# Security Policy
+We will disclose fixes for vulnerabilities in the release notes and urge you to upgrade once a new release is published. 
+For upgrading guidelines, see [our official Upgrading Guideline](https://devpod.sh/docs/getting-started/update).
+
+**To receive update warnings in the CLI (as part of the terminal output whenever you run a command), you must use an official release binary as published on the [GitHub releases page](https://github.com/loft-sh/devpod/releases) of this project.**
+
+See the [install instructions for DevPod](https://devpod.sh/docs/getting-started/install) for the recommended methods of downloading an official release binary for your platform. Community maintained release binaries may **not** contain the version number and will therefore not be able to perform a version check.
+
+
+## Reporting a Vulnerability
+Please report vulnerabilities to: [security@loft.sh](mailto:security@loft.sh)