Configuring and Fetching Secrets

Starting from Bruno v4.0.0, secret manager configuration has moved from Collection > Secrets to Environment > External Secrets.

Fetching and storage

  • Fetch Secrets loads values into a per-environment, in-memory cache for the current session only.
  • Secret values are never written to disk — only provider config and identifiers are saved.
  • Closing the app or collection clears the cache. Reopen Bruno and it will fetch secrets on demand.

  • Go to Environment > External Secrets and select the Azure Key Vault external-secret-overview

  • You will see the configured Secret Manager accounts list from Preferences settings. Select Azure Key Vault account you want to use.

  • To learn more about Azure CLI Authentication azure-account-config

  • Enter a Name and the Vault Name for the secret you want to fetch.

  • Name - the alias used to reference the secret in Bruno, e.g. apiCredentials

  • Vault Name - the name of the Azure Key Vault instance, e.g. my-company-vault

{/* screenshot placeholder */}

  1. Click the Fetch Secrets button in the top-right corner.

  2. Fetched secret keys appear under Secret Keys. Values stay in the in-memory session cache and are not persisted to disk.

{/* screenshot placeholder */}

Use three dots menu to: - Edit account to edit the account details - Remove secret manager to remove the secret manager configuration