WaelHamze / dyn365-ce-vsts-tasks

VSTS Extension for Dynamics 365 Customer Engagement
https://marketplace.visualstudio.com/items?itemName=WaelHamze.xrm-ci-framework-build-tasks
GNU General Public License v3.0
117 stars 56 forks source link

Connection String without Password #137

Closed sohaib-ahmad closed 4 years ago

sohaib-ahmad commented 4 years ago

How can we put a connection string without clear text passwords in Solution Export / Import tasks?

rfontijn commented 4 years ago

Make use of CliendId, ClientSecret having an App regsitration in Azure.

WaelHamze commented 4 years ago

@sohaib-ahmad you need to use variables/library and lock them so they are not visible.

https://docs.microsoft.com/en-us/azure/devops/pipelines/process/variables?view=azure-devops&tabs=yaml%2Cbatch#secret-variables

mattp65 commented 4 years ago

You can also leverage a KeyVault in Azure to hold your password. Once you add the Azure Key Vault task to your pipeline, the secrets are available just like any other variable and can be used to build your connection string.