Report security issues privately to the maintainers before public disclosure.
kmap can inspect Kubernetes workloads and environment-derived configuration. Treat raw discovery reports, Kubernetes manifests, generated architecture metadata, and bucket inventory as potentially sensitive.
Public examples and tests must use generic, mocked, or sanitized data only.