Skip to content

Security: samikroy/azure-policy-analyzer

Security

SECURITY.md

Security Policy

Supported Versions

This repository currently supports the main branch.

Reporting a Vulnerability

Please do not open public issues for sensitive vulnerabilities.

Send a report with the following details:

  • Summary of the issue
  • Steps to reproduce
  • Potential impact
  • Suggested mitigation (if available)

Preferred contact: REPLACE_WITH_SECURITY_CONTACT_EMAIL

We will acknowledge receipt as soon as possible and work with you on coordinated disclosure.

Security Best Practices

  • Do not commit secrets, tokens, or subscription credentials.
  • Avoid posting full resource IDs and tenant details publicly unless required.
  • Validate remediation commands in non-production scope first.

There aren't any published security advisories