Found a security issue? Please let me know!
Don't post it publicly - instead:
- Email me or use GitHub Security Advisories
- I'll respond as soon as I can (usually within a few days)
Mark sensitive values as secrets:
struct APIKeyKey: ConfigurationKey {
static let name = "API_KEY"
static let defaultValue = ""
static let isSecret = true // Redacted in logs
}- Don't commit secrets to git
- Use environment variables or secure stores for production
- Mark sensitive config as
isSecret = true
This library depends on swift-configuration. Check their security policy too.