How to securely manage secrets in Angular, Firebase, GitLab CI/CD?

I am working on an Angular application deployed on Firebase Hosting. I want to keep my sensitive API keys and tokens secure without exposing them in environment.ts, environment.prod.ts, etc files. I have already created pipeline in Gitlab for build and deploy stage, by hard coding the values the application gets build and deploy successfully but secrets, keys gets exposed in the JavaScript bundle when we inspect it.

I tried passing the variables through the CICD secrets/env variables but they get expose in the client side JavaScript bundle.

Continue reading...