google / google/weather-tools

Make use of secret-manager while using weather-dl for license keys.

Open
#368 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
252
Forks
60
Avg merge
8d 4h
Merged PRs (30d)
3

Description

As part of our current data download process for the `weather-dl`, we are not using [secret-manager](https://cloud.google.com/secret-manager) services. This poses a potential security risk, as the sensitive configuration data stored in the config file could be inadvertently leaked, resulting in public access to our API keys and other credentials.

To ensure the security of our licenses and sensitive configuration data, we should integrate the Secret Manager service into the `weather-dl` application. This will allow us to securely manage and retrieve API keys, URLs, and other credentials used during the data download process.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.