For security-related documentation, credential handling, and hardening guidelines (including Docker/container security), please refer to:

docs/security_credentials_guide.md

This document covers:

• General security practices and credential handling
• Environment variable strategy (.env + .env.example)
• Docker and docker-compose security (non-root users, .dockerignore, runtime secrets injection)
• Protection of large data and DVC local cache
• General repository best practices
• Checklist and setup instructions for team members

If you discover a security issue (leaked credentials in history, misconfigured secrets, container escape risks, etc.), please contact the maintainers privately (do not open a public issue).

Thank you for helping keep the project secure.