Security

Report security issues privately to the repository owner.

Do not open public issues for vulnerabilities, credentials, tokens, or customer data.

Secrets

Secrets are managed in Infisical. Real .env files should not be committed or kept on development devices after migration.