opslog/SECURITY.md

Security policy

Secrets and runtime configuration

Do not commit opslog-envs.json, .env files, Kibana credentials, VPN details, or exported log data. Use opslog-envs.example.json as the only configuration template in the repository.

Reporting a vulnerability

Report security issues privately to the repository owner. Do not include credentials, production log contents, or customer data in issues or pull requests.