Infisical Python SDK

Infisical is the open source secret management platform that teams use to centralize their secrets like API keys, database credentials, and configurations.

If you’re working with Python, the official Infisical Python SDK package is the easiest way to fetch and work with secrets for your application. You can read the documentation here.

You can find the documentation for the Python SDK on our SDK documentation page.

The SDK uses requests, which verifies TLS certificates against the Mozilla CA bundle from the certifi package. It does not read your operating system trust store.

If your self-hosted Infisical instance uses a certificate from a private or corporate CA, set REQUESTS_CA_BUNDLE to a CA bundle file that contains that CA:

# Debian / Ubuntu
export REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt

# Fedora / RHEL
export REQUESTS_CA_BUNDLE=/etc/pki/tls/certs/ca-bundle.crt

These paths are the operating system bundles, so the CA must be added there first (for example with update-ca-certificates or update-ca-trust). You can also point REQUESTS_CA_BUNDLE to a PEM file that holds only your CA.

Please do not file GitHub issues or post on our public forum for security vulnerabilities, as they are public!

Infisical takes security issues very seriously. If you have any concerns about Infisical or believe you have uncovered a vulnerability, please get in touch via the e-mail address [email protected]. In the message, try to provide a description of the issue and ideally a way of reproducing it. The security team will get back to you as soon as possible.

Note that this security address should be used only for undisclosed vulnerabilities. Please report any security problems to us before disclosing it publicly.