From fea1e7361490da99d7473dbdf93e02454dd6207e Mon Sep 17 00:00:00 2001
From: Gabriel do Carmo Vieira <48625433+gvieira18@users.noreply.github.com>
Date: Sun, 7 Jun 2026 10:04:56 -0300
Subject: [PATCH 1/2] docs: add repository README

---
 README.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 README.md

diff --git a/README.md b/README.md
new file mode 100644
index 0000000..5967b8b
--- /dev/null
+++ b/README.md
@@ -0,0 +1,12 @@
+# .github
+
+Organization-wide GitHub configurations for [He4rt Developers](https://heartdevs.com).
+
+Files placed in this repository act as **organization-wide defaults**. Any repository under the `he4rt` organization that does not define its own version of these files will inherit them from here.
+
+## Community
+
+- [Discord](https://discord.gg/he4rt)
+- [Twitter](https://twitter.com/He4rtDevs)
+- [Instagram](https://instagram.com/heartdevs)
+- [LinkedIn](https://www.linkedin.com/company/he4rt/)

From 54141750b70f69617536dcdef928d7be1633846e Mon Sep 17 00:00:00 2001
From: Gabriel do Carmo Vieira <48625433+gvieira18@users.noreply.github.com>
Date: Sun, 7 Jun 2026 10:05:04 -0300
Subject: [PATCH 2/2] docs: add org-wide security policy

---
 SECURITY.md | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..339a39a
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,15 @@
+# Security Policy
+
+**PLEASE DON'T DISCLOSE SECURITY-RELATED ISSUES PUBLICLY, [SEE BELOW](#reporting-a-vulnerability).**
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability, please report it privately:
+
+- **GitHub Private Vulnerability Reporting** (preferred) — go to the repository's **Security** tab and click **"Report a vulnerability"**. This creates a private advisory visible only to maintainers and provides a structured workflow for triage, fix coordination, and CVE assignment.
+
+All security vulnerabilities will be promptly addressed.
+
+## Scope
+
+This policy applies to all repositories under the [he4rt](https://github.com/he4rt) GitHub organization, unless a repository defines its own `SECURITY.md`.