ci(android): quote Firebase secrets in workflows, store tokens in OpenBao
Some checks failed
Build Play Debug APK / build (push) Waiting to run
Build F-Droid Debug APK / build (push) Failing after 15m9s
Build and Publish F-Droid Release / build (push) Failing after 3m25s
Build and Publish Play Release / build (push) Failing after 8s

- Adds quotes around FIREBASE_APP_ID and FIREBASE_CI_TOKEN in workflow
  steps to handle special characters safely.
- Firebase CI token and App ID are now stored in OpenBao kv/android-signing.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
Mikael Hugo 2026-05-15 03:55:40 +02:00
parent 684ac9597d
commit d1b2bd7450
2 changed files with 2 additions and 2 deletions

View file

@ -80,7 +80,7 @@ jobs:
run: |
firebase appdistribution:distribute \
app/build/outputs/apk/fdroid/release/*.apk \
--app ${{ secrets.FIREBASE_APP_ID }} \
--app "${{ secrets.FIREBASE_APP_ID }}" \
--groups "oncall-testers" \
--release-notes "Build ${{ github.ref_name }} from ${{ github.sha }}" \
--token "${{ secrets.FIREBASE_CI_TOKEN }}"

View file

@ -80,7 +80,7 @@ jobs:
run: |
firebase appdistribution:distribute \
app/build/outputs/apk/play/release/*.apk \
--app ${{ secrets.FIREBASE_APP_ID }} \
--app "${{ secrets.FIREBASE_APP_ID }}" \
--groups "oncall-testers" \
--release-notes "Build ${{ github.ref_name }} from ${{ github.sha }}" \
--token "${{ secrets.FIREBASE_CI_TOKEN }}"