Skip to content

Security: certforge/AI-102_Cert_Prep

.github/SECURITY.md

Security Policy

Scope

This is a study repository. Security considerations apply to the code examples and scripts.

Never Commit

  • Azure API keys or subscription keys
  • Azure subscription IDs or tenant IDs
  • Connection strings with credentials
  • .env files with real values

All secrets should be stored as environment variables. See src/python/env-template.txt.

Reporting a Security Issue

If you find a real security vulnerability in the example code (e.g., command injection, credential exposure), please open a GitHub Issue marked [SECURITY].

Safe Authentication Pattern

All code in this repository uses DefaultAzureCredential() from azure-identity. This is the exam-recommended pattern and does NOT require API keys in code.

from azure.identity import DefaultAzureCredential
credential = DefaultAzureCredential()

There aren’t any published security advisories