# Security & Compliance Guidelines

> Objective: Define rules for handling sensitive information, credentials, access control, and vulnerability management to reduce security risk and compliance exposure.

::: tip Source File
View the full rule: [`.agent/rules/04-security.md`](https://github.com/snowdreamtech/template/blob/main/.agent/rules/04-security.md)
:::

## Sections

- 1. Credential & Secret Management
- 1. Gitleaks Configuration Best Practices
- 1. Access Control & Auditing
- 1. Encryption & Transport Security
- 1. Security Scanning & Dependency Hygiene
- 1. Incident Response & Disclosure
- 1. Application Security Design
