temporalio / temporalio/temporal

Support reading SQL password from file in temporal-sql-tool

Open
#10,028 3 comments 0 reactions 1 assignee View on GitHub

@simvlad is already working on this.

Since Apr 30, 2026.

enhancement
Dominant language
Go
Stars
23.2k
Forks
1.9k
Avg merge
2d 8h
Merged PRs (30d)
228

Description

Is your feature request related to a problem? Please describe.
temporal-sql-tool supports reading the SQL database password from the environment or as a command line argument. Both of these result in the password being readable from the process table (/proc). For defense in depth, it would be preferable to read the password from a file.

Describe the solution you'd like
Support reading the SQL database password from a file by setting an option like --password-file or an SQL_PASSWORD_FILE environment variable.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.