ci-secrets

Encode sensitive files as base64 and register them with GitHub Secrets.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/coco-de/skills --skill ci-secrets
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ci-secrets
Source: https://github.com/coco-de/skills/tree/main/plugins/cc-uiux-devops/skills/ci-secrets
Command: npx skills add https://github.com/coco-de/skills --skill ci-secrets

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the secure management of sensitive credentials and configuration files for CI/CD pipelines, preventing accidental exposure and ensuring smooth automated deployments.

Core Features & Use Cases

  • Secure Encoding: Encodes sensitive local files (like keystores, JSON keys, and configuration directories) into base64 format for secure storage.
  • GitHub Secrets Management: Automates the registration of encoded secrets with GitHub Actions.
  • CI Decoding: Provides clear patterns for CI workflows to decode these secrets back into usable files or environment variables during the build process.
  • Use Case: When deploying your Flutter app, this skill ensures your Android keystore, iOS signing certificates, and Firebase service account keys are securely managed and available to your CI/CD pipeline without ever being exposed in your codebase.

Quick Start

Use the ci-secrets skill to encode the local file 'android/keystore/release.keystore' and prepare it for GitHub Secrets.

Frequently Asked Questions about ci-secrets

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely manage GitHub Actions secrets for CI/CD deployments?▼

To securely manage GitHub Actions secrets for CI/CD, you encode local sensitive files like Android keystores or Firebase credentials into base64 strings and register them with GitHub Secrets via the gh CLI.

How do I encode and decode Flutter app signing files for GitHub Actions?▼

You encode Flutter app signing assets like Android keystores and iOS certificates locally into base64 format, register them as GitHub Secrets, and configure your CI workflow to decode these strings back into files during the build process.

Can I use the gh CLI to automate registering base64 encoded files as GitHub Secrets?▼

Yes, you can use the gh CLI to automate the registration of base64 encoded sensitive files and directories, converting your local credentials into GitHub Secrets for secure CI/CD pipeline access.

What is the best way to store Firebase service account keys in GitHub Secrets?▼

The best way to store Firebase service account keys in GitHub Secrets is to convert the local JSON credential files into base64 encoded strings, register them securely, and decode them within your CI workflow.

Does this secrets management approach work with Serverpod configurations and iOS signing assets?▼

Yes, this secrets management approach supports Serverpod configurations and iOS signing assets, securely encoding and decoding these sensitive directories for your automated CI/CD deployments.

Why do I need to base64 encode keystores before adding them to GitHub Actions?▼

You need to base64 encode keystores before adding them to GitHub Actions because it safely converts binary sensitive files into text strings for secure storage as environment secrets and reliable decoding during builds.