Josef Andersson authored and integrated a formal security vulnerability reporting process for the starship/starship repository by creating a comprehensive SECURITY.md policy. Using Markdown and focusing on documentation best practices, Josef defined clear guidelines for external researchers to report vulnerabilities, specifying required information, confidentiality protocols, and submission through GitHub Advisory. The policy established a transparent workflow with defined response times and patch notification procedures, aligning with governance standards to streamline triage and remediation. This work addressed the need for a standardized disclosure process, enhancing trust and communication between users and maintainers. The contribution demonstrated depth in documentation and security process design.