Example of injecting secrets from CyberArk Conjur into Concourse CI pipelines securely using CyberArk's Summon

pipeline.yml

---
jobs:
- name: job-hello-world
  public: true
  plan:
  - task: hello-world
    config:
      platform: linux
      image_resource:
        type: docker-image
        source: {repository: busybox}
      run:
        path: env
        args: []
      params:
        USERNAME: ((username))
        PASSWORD: ((password))

secrets.yml

---
USERNAME: !var test/username
PASSWORD: !var test/password

test.sh

#!/bin/bash
set -eo pipefail

summon bash -c 'fly -t main set-pipeline -c pipeline.yml -p helloworld -v username=$USERNAME -v password=$PASSWORD'