This repository contains public instructional material. It should not contain production code, sensitive system details, or VA-restricted data.
- PHI / PII / SPI or any veteran-identifiable information
- Internal VA network paths not already public
- Credentials, API keys, tokens, certificates
- Vulnerability exploit details targeting VA infrastructure
If you believe you have identified a security concern related to the structure or scripts in this repository:
- Do not post publicly.
- Create a sanitized Issue (omit sensitive specifics) OR
- Contact the maintainer directly via the email link in the guide.
- For VA enterprise security matters, follow internal VA/ISSO escalation processes.
PowerShell scripts are intentionally limited:
- No destructive file deletions outside intended workspace patterns
- Logging is local-only
- Review scripts before execution (
-WhatIf
or-DryRun
flags where available)
Bundled reveal.js
assets are vendor copies, not remotely loaded (offline friendly, reduces CDN risks). Verify integrity by comparing against official release 5.2.1
if needed.
Users are responsible for ensuring that outputs generated using the guide or prompt templates comply with HIPAA, FedRAMP, and VA policy.
If in doubt about security posture or data exposure risk, pause and consult your ISSO or supervisor.