Added service account management note.

firebase · Dec 19, 2023 · 4864eb1 · 4864eb1
1 parent b322736
commit 4864eb1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -174,6 +174,7 @@ authorize access to your Firebase project:
 which is required for all integration tests. This can be downloaded as a JSON file from the 
 **Settings > Service Accounts** tab of the Firebase console when you click the
 **Generate new private key** button. Copy the file into the repo so it's available at `cert.json`.
+   > **Note:** Service accounts should be carefully managed and their keys should never be stored in publicly accessible source code or repositories.
 
 
 2. Web API key: This allows for Auth sign-in needed for some Authentication and Tenant Management