Merge pull request #78 from Pranav-MSK/docs/security-policy

Docs/security policy

Author: itsdakshjain

SECURITY.md

@@ -9,7 +9,7 @@
 ## Reporting a Vulnerability
 
 If you discover a security vulnerability within is-one-one, please send an email to the maintainers. All security vulnerabilities will be promptly addressed.
-
+Report on dakshjain1265@gmail.com
 Please do not report security vulnerabilities through public GitHub issues.
 
 ## Disclosure Policy
@@ -22,3 +22,18 @@ When we receive a security bug report, we will:
 4. Release the fix and publicly announce the vulnerability
 
 We appreciate your help in keeping the project secure.
+
+
+## Scope
+ 
+This policy applies to the source code in this repository. Since this project
+is a SANDBOX repository and collection of Python functions that confirm `1 == 1`, the attack surface
+is blessedly small — but we still want to handle any concerns properly.
+
+## Attribution
+ 
+This security policy was created following the guidelines recommended by
+[GitHub's security advisories documentation](https://docs.github.com/en/code-security/security-advisories).
+
+
+