Skip to content

Latest commit

 

History

History
40 lines (29 loc) · 1.64 KB

SECURITY.md

File metadata and controls

40 lines (29 loc) · 1.64 KB

Security Policy

About this project

AzureSREAgentDemoLab is an education and demo project for validating Azure SRE Agent and Azure Copilot Observability Agent scenarios. It is not intended for production use. Several defaults (e.g. public network access, development-only authentication bypass, and emulator certificate trust) are deliberately permissive to make the lab easy to run. Do not deploy it as-is to a production environment.

Supported Versions

Only the latest state of the main branch is supported. Older commits, tags, and forks are not maintained with security updates.

Version Supported
main (latest) ✅
Any older commit ❌

Reporting a Vulnerability

Please report security vulnerabilities privately. Do not open a public issue or pull request for a security problem.

  1. Use GitHub's private vulnerability reporting for this repository: open the Security tab and choose Report a vulnerability (https://github.com/tfsugjp/AzureSREAgentDemoLab/security/advisories/new).
  2. Include a clear description, affected files or endpoints, reproduction steps, and any suggested remediation.

What to expect

  • Acknowledgement: within about 5 business days.
  • Status updates: as triage progresses.
  • Resolution: if accepted, a fix is prepared and you are credited (unless you prefer to remain anonymous). If declined, we explain why.

Because this is a demo lab maintained on a best-effort basis, timelines are not guaranteed. Thank you for helping keep the project and its users safe.