Quick Notes81 words
Sensitive files during deployment — quick notes
Sensitive files — quick notes
| Need | Mechanism |
|---|---|
| Signing certificate, keystore, provisioning profile | Secure files library |
| Retrieve in a pipeline | Download Secure File task |
| A value rather than a file | Key Vault-linked variable group |
- Secure files are protected resources → approvals, checks, pipeline permissions.
- Never commit certificates: they stay in git history after rotation.
- On self-hosted agents the downloaded file persists — clean it up.