SECURITY.md

# Security Policy

## Supported Versions

| Version | Supported |
|---|---|
| Latest | Yes |
| Older | No |

Only the latest version receives security updates. Please update to the latest release.

## Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

1. **Do not** open a public issue
2. Email: **report@liketrek.com**
3. Include a description of the vulnerability and steps to reproduce

You will receive a response within 48 hours. Once confirmed, a fix will be released as soon as possible.

## Scope

This policy covers the TREK application and its Docker image (`mauriceboe/trek`).

Third-party dependencies are monitored via GitHub Dependabot.