Security Policy Never commit secrets to the repository. Use config/*.example files as templates only. Perform regular dependency and static security scans.