A company uses Azure Key Vault to store secrets. How should a release pipeline securely access these secrets without hardcoding them?
-
A
Link the Key Vault as a variable group and reference variables in the pipeline
-
B
Pass secrets as plain-text pipeline variables
-
C
Encode secrets in Base64 and store in pipeline YAML
-
D
Use the Azure CLI task to echo secrets into environment variables