Skip to content

Conversation

@michalurbanek
Copy link
Collaborator

No description provided.

@michalurbanek michalurbanek self-assigned this Jan 14, 2026
@michalurbanek michalurbanek force-pushed the mu/chore/secrets branch 3 times, most recently from ecb1b08 to 9dd3544 Compare January 14, 2026 13:54
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR implements comprehensive secrets management for the Flutter template project using age + sops encryption. The changes move sensitive configuration data (API keys, certificates, Firebase config files) from plaintext to encrypted files, with flavor-specific secret management.

Changes:

  • Introduced flutter_dotenv package for environment variable management across flavors
  • Implemented encrypted secrets storage using age/sops with shell scripts for encryption/decryption
  • Migrated hardcoded configuration values to environment variables loaded from .env files
  • Reorganized Android keystore structure and added iOS xcconfig files for secret injection

Reviewed changes

Copilot reviewed 60 out of 64 changed files in this pull request and generated 8 comments.

Show a summary per file
File Description
pubspec.yaml Added flutter_dotenv dependency and .env asset files
lib/app/setup/setup_app.dart Loads environment variables and replaces hardcoded Firebase config
lib/app/configuration/configuration.dart Simplified configuration to use dotenv instead of flavor-specific classes
extras/secrets/tools/*.sh Shell scripts for encrypting, decrypting, and managing secrets
extras/secrets/*.enc Encrypted secret files for different environments and platforms
makefile Added secretsDecrypt/Encrypt/Clean commands to workflow
android/app/build.gradle Updated keystore paths and added Flutter target specifications
ios/Flutter/*.xcconfig New xcconfig files to inject secrets into iOS builds
.github/workflows/*.yml Updated CI/CD workflows to decrypt secrets before builds
README.md Added comprehensive documentation for secrets handling

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@michalurbanek michalurbanek merged commit 3e0c344 into master Jan 15, 2026
1 check passed
@michalurbanek michalurbanek deleted the mu/chore/secrets branch January 15, 2026 09:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants