CORE-742: switch Snowflake CI auth from password to private key

README.md

@@ -23,6 +23,7 @@ The package has two core components:
 
 **1. Elementary Tables**
 Using dbt's on-run-end hook, the package automatically parses your dbt artifacts and run results and loads them as structured tables into your warehouse. This includes:
+
 - **Metadata tables** — models, tests, sources, exposures, columns, seeds, snapshots, and more
 - **Run results tables** — invocations, model run results, test results, source freshness, and job-level outcomes
 

integration_tests/profiles/generate_profiles.py

@@ -32,13 +32,18 @@ def _yaml_inline(value: Any) -> str:
     """Render *value* for inline YAML.
 
     * Dicts (e.g. bigquery keyfile) → compact ``{key: val, …}``
+    * Strings (incl. multi-line PEM private keys) → double-quoted scalar with
+      escaped newlines so the rendered profiles.yml stays parseable inline
+      and values like ``"true"``/``"null"``/``"123"`` aren't type-coerced.
     * Undefined (docker-only, no secrets) → empty string ``''``
     * Everything else → pass through as-is
     """
     if isinstance(value, Undefined):
         return "''"
     if isinstance(value, dict):
         return yaml.dump(value, default_flow_style=True).strip()
+    if isinstance(value, str):
+        return yaml.dump(value, default_flow_style=True, default_style='"').strip()
     return value
 
 

integration_tests/profiles/profiles.yml.j2

@@ -107,7 +107,10 @@
       type: snowflake
       account: {{ snowflake_account | toyaml }}
       user: {{ snowflake_user | toyaml }}
-      password: {{ snowflake_password | toyaml }}
+      private_key: {{ snowflake_private_key | toyaml }}
+      {%- if snowflake_private_key_passphrase is defined and snowflake_private_key_passphrase %}
+      private_key_passphrase: {{ snowflake_private_key_passphrase | toyaml }}
+      {%- endif %}
       role: {{ snowflake_role | toyaml }}
       database: {{ snowflake_database | toyaml }}
       warehouse: {{ snowflake_warehouse | toyaml }}