I have a SpecFlow test suite running some Selenium UI tests for our web app in ADO, and we need to access some sensitive information to be able to log in to various places. They are currently stored in normal environment variables so they are in plain text and pretty easy to access, but too insecure to stay that way (it is currently a test user on a dev box, but that will change when the tests are production ready).
ADO secret env vars are not automatically set up in a way that an executable can access, and it does not look like I can pass parameters through
vstest.exe to the individual tests.
I suggested something like
Azure Key Vault, but that is not an option. I also got
dotnet user-secrets working locally, but setting that up on all the agents is apparently not an option either.
I think that secret environment variables should be the way to go, but I am using .NET Framework 4.6.1 and all of the documentation I read to set those up with some sort of config file are for v5+ or Core. If anybody has experience dealing with this, any ideas would help!
Update: I found out it is supposedly possible to use a
.runsettings file with empty parameters, and set them from within ADO, but it seems like setting the MSTest attributes conflicts with some of the SpecFlow stuff I need.