-
Notifications
You must be signed in to change notification settings - Fork 7
chore: Secrets handling #8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
ecb1b08 to
9dd3544
Compare
9dd3544 to
2628a1c
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR implements comprehensive secrets management for the Flutter template project using age + sops encryption. The changes move sensitive configuration data (API keys, certificates, Firebase config files) from plaintext to encrypted files, with flavor-specific secret management.
Changes:
- Introduced
flutter_dotenvpackage for environment variable management across flavors - Implemented encrypted secrets storage using
age/sopswith shell scripts for encryption/decryption - Migrated hardcoded configuration values to environment variables loaded from
.envfiles - Reorganized Android keystore structure and added iOS xcconfig files for secret injection
Reviewed changes
Copilot reviewed 60 out of 64 changed files in this pull request and generated 8 comments.
Show a summary per file
| File | Description |
|---|---|
| pubspec.yaml | Added flutter_dotenv dependency and .env asset files |
| lib/app/setup/setup_app.dart | Loads environment variables and replaces hardcoded Firebase config |
| lib/app/configuration/configuration.dart | Simplified configuration to use dotenv instead of flavor-specific classes |
| extras/secrets/tools/*.sh | Shell scripts for encrypting, decrypting, and managing secrets |
| extras/secrets/*.enc | Encrypted secret files for different environments and platforms |
| makefile | Added secretsDecrypt/Encrypt/Clean commands to workflow |
| android/app/build.gradle | Updated keystore paths and added Flutter target specifications |
| ios/Flutter/*.xcconfig | New xcconfig files to inject secrets into iOS builds |
| .github/workflows/*.yml | Updated CI/CD workflows to decrypt secrets before builds |
| README.md | Added comprehensive documentation for secrets handling |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
No description provided.