From 5ef843b076b330443fecab4a70cc14fc1b6a6c09 Mon Sep 17 00:00:00 2001
From: Dusty <42273218+DustyStudy@users.noreply.github.com>
Date: Mon, 7 Sep 2026 12:52:04 -0500
Subject: [PATCH 1/2] Add SECURITY.md

---
 SECURITY.md | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..40f6dc4
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,30 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in this repository, please report it privately — **do not open a public GitHub issue**.
+
+**Preferred method:** Use GitHub's [private vulnerability reporting](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability) feature (Security tab → "Report a vulnerability" on this repo).
+
+**Alternative:** Email [YOUR_EMAIL_HERE] with a description of the issue, steps to reproduce, and any relevant logs or templates. Please do not include real AWS account IDs, ARNs, or credentials in your report.
+
+You can expect an initial response within 5 business days.
+
+## Scope
+
+This repository provides aws-orgseed, a tool for seeding AWS Organizations/accounts via Terraform using OIDC, for companies that need to configure multiple orgs consistently. Reports in scope include:
+
+- Logic errors in Terraform modules or OIDC trust configuration that could grant excessive or unintended access
+- Supply-chain concerns (malicious or unpinned dependencies, GitHub Actions, Terraform providers)
+- Secrets or credentials accidentally committed to this repo
+
+Out of scope: vulnerabilities in AWS services themselves (report those to AWS), or issues in downstream forks/deployments not present in this repo's source.
+
+## Supported Versions
+
+Only the latest tagged release is actively supported. Older releases may not receive security fixes.
+
+| Version | Supported |
+| ------- | --------- |
+| Latest release | :white_check_mark: |
+| Older releases | :x: |

From a47c6fb7a4d31a4b1d001fbd54d8c6b76fafb47a Mon Sep 17 00:00:00 2001
From: Dusty <42273218+DustyStudy@users.noreply.github.com>
Date: Mon, 7 Sep 2026 14:17:50 -0500
Subject: [PATCH 2/2] Remove duplicate root SECURITY.md

Content was copy-pasted from a different repo (referenced aws-orgseed/Terraform/OIDC and had an unfilled [YOUR_EMAIL_HERE] placeholder) and conflicted with the accurate, orgctl-specific policy at .github/SECURITY.md, which GitHub already surfaces on the repo's Security tab.
---
 SECURITY.md | 30 ------------------------------
 1 file changed, 30 deletions(-)
 delete mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
deleted file mode 100644
index 40f6dc4..0000000
--- a/SECURITY.md
+++ /dev/null
@@ -1,30 +0,0 @@
-# Security Policy
-
-## Reporting a Vulnerability
-
-If you discover a security vulnerability in this repository, please report it privately — **do not open a public GitHub issue**.
-
-**Preferred method:** Use GitHub's [private vulnerability reporting](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability) feature (Security tab → "Report a vulnerability" on this repo).
-
-**Alternative:** Email [YOUR_EMAIL_HERE] with a description of the issue, steps to reproduce, and any relevant logs or templates. Please do not include real AWS account IDs, ARNs, or credentials in your report.
-
-You can expect an initial response within 5 business days.
-
-## Scope
-
-This repository provides aws-orgseed, a tool for seeding AWS Organizations/accounts via Terraform using OIDC, for companies that need to configure multiple orgs consistently. Reports in scope include:
-
-- Logic errors in Terraform modules or OIDC trust configuration that could grant excessive or unintended access
-- Supply-chain concerns (malicious or unpinned dependencies, GitHub Actions, Terraform providers)
-- Secrets or credentials accidentally committed to this repo
-
-Out of scope: vulnerabilities in AWS services themselves (report those to AWS), or issues in downstream forks/deployments not present in this repo's source.
-
-## Supported Versions
-
-Only the latest tagged release is actively supported. Older releases may not receive security fixes.
-
-| Version | Supported |
-| ------- | --------- |
-| Latest release | :white_check_mark: |
-| Older releases | :x: |