summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--f3s/AGENTS.md6
1 files changed, 6 insertions, 0 deletions
diff --git a/f3s/AGENTS.md b/f3s/AGENTS.md
index 5637ce3..e6c51bb 100644
--- a/f3s/AGENTS.md
+++ b/f3s/AGENTS.md
@@ -1 +1,7 @@
Follow file:///home/paul/Notes/snippets/f3s/f3s.md
+
+## Security Policy
+
+- **Never commit secrets to git.** This includes SSH private keys, API tokens, passwords, and any other sensitive credentials.
+- Secrets must be deployed as Kubernetes Secrets directly via `kubectl create secret` or through a secrets management solution.
+- If a secret is accidentally committed, it must be rotated immediately and pruned from git history using `git-filter-repo`.