u/Either-Home9002

I've never done something like this so bear with me. I'm really curios how to handle authentication info for connecting my code to firestore while also having it all on github. I've thought about creating a .py file with variables set for project/collection/document and then importing them into the main file. Is this common practice or are these security vulnerabilities that I'm not aware of?