From 3b878cf74c270f03ef1a20269a85d79b239e10e0 Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Fri, 11 Sep 2026 15:11:53 +0000
Subject: [PATCH] feature: add CI workflow and security policy

Co-Authored-By: Amit Manchella <amit.manchella@cognition.ai>
---
 .github/workflows/ci.yml | 22 ++++++++++++++++++++++
 SECURITY.md              | 19 +++++++++++++++++++
 mvnw                     |  0
 3 files changed, 41 insertions(+)
 create mode 100644 .github/workflows/ci.yml
 create mode 100644 SECURITY.md
 mode change 100644 => 100755 mvnw

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..cdc0c25
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,22 @@
+name: CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '8'
+          cache: maven
+
+      - name: Build and test
+        run: ./mvnw -B verify
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..cce10e5
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,19 @@
+# Security Policy
+
+## Supported Versions
+
+| Version                  | Supported          |
+| ------------------------ | ------------------ |
+| `master` (0.1.0)         | :white_check_mark: |
+| Older releases/branches  | :x:                |
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities **privately** through GitHub Security
+Advisories: open the repository's **Security** tab and click
+**"Report a vulnerability"**.
+
+**Do not open public GitHub issues for security vulnerabilities.**
+
+We aim to acknowledge and respond to vulnerability reports within
+**5 business days**.
diff --git a/mvnw b/mvnw
old mode 100644
new mode 100755