If you discover a security vulnerability, please report it responsibly:

1. Do not create a public GitHub issue
2. Send details to the repository maintainers
3. Include steps to reproduce
4. Provide impact assessment

• Never store credentials in code
• Use Windows Credential Manager or secure vaults
• Implement credential rotation

• Use TLS/SSL for all connections
• Validate certificates when possible
• Implement connection timeouts

• Sanitize all user inputs
• Validate parameter types and ranges
• Prevent injection attacks

• Log security events
• Avoid logging sensitive data
• Implement log rotation

This repository uses:

• PSScriptAnalyzer for code analysis
• Bandit for security scanning