docs: add SECURITY.md

Author: TeaCoder52

SECURITY.md

@@ -0,0 +1,36 @@
+# Datary Security Policy
+
+At Datary, security is a top priority. We value the community and security researchers who help us make Datary safer for everyone.
+
+## Reporting Vulnerabilities
+
+If you discover a security issue, please report it responsibly. You can contact us via:
+
+- **Email:** security@datary.app
+
+### What to Include in Your Report
+
+To help us understand and fix the issue, please provide:
+
+- A clear description of the vulnerability.
+- Steps to reproduce it safely (avoid exposing real production data).
+- Any sample code, screenshots, or videos that illustrate the problem.
+- The potential impact and severity.
+
+### Do Not Do
+
+- Access or modify real user databases beyond what is necessary to demonstrate the issue.
+- Perform denial-of-service attacks, data deletion, or manipulation of unrelated systems.
+- Share the vulnerability publicly before it has been resolved.
+
+### How We Handle Reports
+
+- We will acknowledge your report within **2 business days**.
+- We will investigate and prioritize based on potential impact.
+- After resolution, we may credit you in release notes or our security page (if desired).
+
+## Our Commitment
+
+We are committed to quickly addressing legitimate security issues and keeping Datary safe. Responsible disclosure helps protect all users and ensures that the platform remains reliable for database management.
+
+Thank you for helping us maintain a secure and trustworthy platform!

scripts/telegram-notify.js

@@ -10,7 +10,7 @@ const ref = process.env.GITHUB_REF;
 const sha = process.env.GITHUB_SHA;
 const payloadPath = process.env.GITHUB_EVENT_PATH;
 
-let message = `*GitHub Notification*\nRepository: ${repo}\nActor: ${actor}\nEvent: ${event}\nRef: ${ref}\nSHA: ${sha}`;
+let message = `*GitHub Notification*\n\nRepository: ${repo}\nActor: ${actor}\nEvent: ${event}\nRef: ${ref}\nSHA: ${sha}`;
 
 if (payloadPath && fs.existsSync(payloadPath)) {
 	const payload = JSON.parse(fs.readFileSync(payloadPath, 'utf8'));