From fa2a81bf5515805f2eaf2d5a42d36548be1bd7ec Mon Sep 17 00:00:00 2001
From: Iko <6572003+iap@users.noreply.github.com>
Date: Thu, 27 Aug 2026 00:30:09 +0700
Subject: [PATCH] fix(security): point disclosure at the advisory form

SECURITY.md linked /issues/new and called it a private issue. That form
creates a public issue, contradicting the instruction not to disclose
publicly. Private vulnerability reporting is enabled on this repo, so
link the security advisory form instead.

Drop Supported Versions: its body was unedited GitHub boilerplate
addressed to the repo owner, and a template repo has no versions to
support.
---
 SECURITY.md | 15 +++------------
 1 file changed, 3 insertions(+), 12 deletions(-)

diff --git a/SECURITY.md b/SECURITY.md
index e8c1957..1d1dea1 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,18 +1,9 @@
 # Security Policy
 
-## Supported Versions
-
-Use this section to tell people about which versions of your project are
-currently being supported with security updates.
-
-| Version | Supported |
-| --- | --- |
-| latest | :white_check_mark: |
-
 ## Reporting a Vulnerability
 
-If you discover a security vulnerability, please report it responsibly by
-opening a [private issue](https://github.com/iap/.github/issues/new) or
-contacting the maintainer at <6572003+iap@users.noreply.github.com>. We will respond as soon as possible and work with you to address the issue.
+If you discover a security vulnerability, please report it responsibly using
+[GitHub's private vulnerability reporting](https://github.com/iap/.github/security/advisories/new)
+or by contacting the maintainer at <6572003+iap@users.noreply.github.com>. We will respond as soon as possible and work with you to address the issue.
 
 Please do not publicly disclose the vulnerability until it has been resolved.