I'm wondering what would give me the best result in a test automation framework:
- CICD build pipeline retrieves secrets and passes them into the test automation framework as environment variables
- CICD build pipeline passes in keyvault(s) client ID and secret as environment variables and have the framework interface with the vaults to get the secrets it needs
Option 1 seems like the easiest way to go, but doesn't provide as much scalability. Option 2 has more scalability but less security (because we're passing in the KV client as an env variable)