apache/airflow

Update Security model documentation to explain our approach for sensitive data exposure over API

Open

#59,839 opened on Dec 27, 2025

View on GitHub
 (8 comments) (0 reactions) (0 assignees)Python (16,781 forks)batch import
good first issuekind:documentation

Repository metrics

Stars
 (44,809 stars)
PR merge metrics
 (Avg merge 7d 18h) (834 merged PRs in 30d)

Description

Body

We should update the security model to explain the policy around exposing the sensitive data.

Committer

  • I acknowledge that I am a maintainer/committer of the Apache Airflow project.

Contributor guide

Research direction
Review the existing security model documentation in the Apache Airflow repository, focusing on sections about sensitive data exposure. Identify the current policy and proposed changes. Check API endpoints that might expose sensitive data and understand how they are documented. Propose updates to clearly explain the approach for handling sensitive data over the API.
Tech stack
python
Domain
documentationsecurity
Issue type
Documentation
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GitDocumentation skills
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70