You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Harshreddy06 (via GitHub)" <gi...@apache.org> on 2026/08/18 07:40:42 UTC
[PR] Update security model documentation for sensitive API data [airflow]
Harshreddy06 opened a new pull request, #71759:
URL: https://github.com/apache/airflow/pull/71759
## Summary
Update the Airflow security model documentation to clarify the handling of sensitive values returned through the API.
## Changes
- Document that sensitive connection details, variables, and configuration values are not exposed in clear text through Airflow API responses.
- Clarify that users should use appropriate secure mechanisms when accessing sensitive values.
- Improve guidance around sensitive data exposure through the API.
## Testing
Documentation-only change; no code changes or tests are required.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update security model documentation for sensitive API data [airflow]
Posted by "kaxil (via GitHub)" <gi...@apache.org>.
kaxil commented on PR #71759:
URL: https://github.com/apache/airflow/pull/71759#issuecomment-5942549656
Closing this. The security model already says this a few lines above the insertion point: sensitive connection details, variables and configuration are not exposed through the API, UI or `airflowctl` after Airflow 3.0, and are masked in logs, UI and API outputs. The new paragraph repeats it and points to "appropriate secure mechanisms" without naming one.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update security model documentation for sensitive API data [airflow]
Posted by "boring-cyborg[bot] (via GitHub)" <gi...@apache.org>.
boring-cyborg[bot] commented on PR #71759:
URL: https://github.com/apache/airflow/pull/71759#issuecomment-5325121250
Congratulations on your first Pull Request and welcome to the Apache Airflow community! If you have any issues or are unsure about any anything please check our [Contributors' Guide](https://github.com/apache/airflow/blob/main/contributing-docs/README.rst)
Here are some useful points:
- Pay attention to the quality of your code (ruff, mypy and type annotations). Our [prek-hooks]( https://github.com/apache/airflow/blob/main/contributing-docs/08_static_code_checks.rst#prerequisites-for-prek-hooks) will help you with that.
- In case of a new feature add useful documentation (in docstrings or in `docs/` directory). Adding a new operator? Check this short [guide](https://github.com/apache/airflow/blob/main/airflow-core/docs/howto/custom-operator.rst) Consider adding an example Dag that shows how users should use it.
- Consider using [Breeze environment](https://github.com/apache/airflow/blob/main/dev/breeze/doc/README.rst) for testing locally, it's a heavy docker but it ships with a working Airflow and a lot of integrations.
- Be patient and persistent. It might take some time to get a review or get the final approval from Committers.
- Please follow [ASF Code of Conduct](https://www.apache.org/foundation/policies/conduct) for all communication including (but not limited to) comments on Pull Requests, Mailing list and Slack.
- Be sure to read the [Airflow Coding style]( https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#coding-style-and-best-practices).
- Always keep your Pull Requests rebased, otherwise your build might fail due to changes not related to your commits.
Apache Airflow is a community-driven project and together we are making it better 🚀.
In case of doubts contact the developers at:
Mailing List: dev@airflow.apache.org
Slack: https://s.apache.org/airflow-slack
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update security model documentation for sensitive API data [airflow]
Posted by "kaxil (via GitHub)" <gi...@apache.org>.
kaxil closed pull request #71759: Update security model documentation for sensitive API data
URL: https://github.com/apache/airflow/pull/71759
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org