A small command-line utility for encrypting/decrypting arbitrary files using Rijndael method.
High-level scenario of using this utility in AppVeyor CI environment:
- Encrypt file on development machine.
- Commit encrypted file to source control.
- Place "secret" to project environment variable.
- Decrypt file during the build.
From command line download secure-file NuGet package:
nuget install secure-file -ExcludeVersion
Encrypt file:
secure-file\tools\secure-file -encrypt C:\path-to\filename-to-encrypt.ext -secret MYSECRET1234
Encrypted file will be saved in the same directory as input file, but with .enc extension added. You can optionally specify output file name with -out parameter.
Commit encrypted file to source control.
Put "secret" value to project environment variables on Environment tab of project settings on in appveyor.yml as secure variable:
environment:
my_secret:
secure: BSNfEghh/l4KAC3jAcwAjgTibl6UHcZ08ppSFBieQ8E=
To decrypt the file add these lines to install section of your project config:
install:
- nuget install secure-file -ExcludeVersion
- secure-file\tools\secure-file -decrypt path-to\encrypted-filename.ext.enc -secret %my_secret%
Note that file won't be decrypted on Pull Request builds as secure variables are not set during PR build.