The API keys would need to be read from the environment, and has to be defined as GitHub secrets. The mapping of providers and their environmental variable key names can be hard-coded in a test (or a naming convention could be used e.g. provider_name -> PROVIDER_NAME_API_KEY or PROVIDER_NAME_SECRET or something).

Example: #643 #652