Search code examples
javagithubcassandracqldatastax-astra

Is the secure-connect-DBNAME.zip safe to upload to a repository?


I have been using DataStax and I'm about to push to my repository, is it safe to have the secure-connect-DBNANE.zip on the repo? I would suppose so since it's required to make queries but I'm not certain.


Solution

  • The Datastax documentation does mention:

    Be careful when sharing connection details. Providing this information to another user grants them access to your Astra database and ownership capabilities, such as making modifications to the database.

    For security, delete downloaded connection credentials after sending them to your teammate.

    That does not strike me as something you should have in a Git repository.

    You should rather re-download that file when you need it in a new cloned instance of your repository.

    Alternatively, you can right-click the Download credentials link, copy the link source, and then use a curl command to download the secure-connect-database_name.zip file:

    curl -L "<secure-connect-database_name-download-URL>" > database_name.zip