Skip to content

PRDCT-480: note that transformation code is not encrypted #383

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
jordanrburger wants to merge 2 commits into from
Closed

PRDCT-480: note that transformation code is not encrypted #383

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3be5ed8
docs: note that transformation code is not encrypted
Jun 8, 2026
f252bf1
Merge branch 'main' into scout/secdoc-encryption-note
jordanrburger Jul 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions overview/encryption.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,8 @@ Decryption occurs solely during the serialization of configuration to the Docker
configuration file. The decrypted data are stored on the Docker host drive and are promptly
deleted after the container's completion. The component code exclusively accesses the decrypted data.

***Note:** Encryption applies only to configuration keys prefixed with `#` in components that support them. **Transformation code has no encryption facility** — any value written directly into transformation code (for example, a [Python transformation](https://help.keboola.com/transformations/python-plain/)) is stored as plaintext. Keep credentials in a component that supports `#`-encrypted parameters, such as [Custom Python](https://help.keboola.com/components/applications/custom-python/).*

## UI Interaction
When saving arbitrary configuration data, if a key is prefixed with the `#` character, the associated value is automatically encrypted.
For instance, consider the following configuration:
Expand Down
Loading