# Security Policy
## Reporting a Vulnerability
To report a vulnerability, Please follow port's [vulnerability disclosure](https://docs.port.io/security#vulnerability-disclosure)
## Supported Versions
| Version | Supported |
|---------|-----------|
| 0.x | ✅ |
## Safe Handling of Credentials
- Never commit `.env` files or API tokens to version control.
- The SDK avoids logging tokens; keep the default logging configuration unless auditing mandates otherwise.
- Rotate tokens used in documentation examples frequently.