[StepSecurity] Apply security best practicesresolve: #137Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> (commit: eaee9c3)