search

google / secrets-gradle-plugin

A Gradle plugin for providing your secrets to your Android project.
Apache License 2.0
1.13k stars 99 forks source link

Leaked GCP API Keys #68

Open johnjeremih opened 11 months ago

johnjeremih commented 11 months ago

I still get Leaked GCP API Keys, any idea how to solve this?

It works when displaying maps, but when it comes to Google Places I need to initialize it on the application class

image

image

msfjarvis commented 10 months ago

From the README

This plugin is primarily for hiding your keys from version control. Since your key is part of the static binary, your API keys are still recoverable by decompiling an APK.

You have incorrect expectations from the project.

yuvaraj119 commented 10 months ago

Google should create some api to access secret keys from play store or andorid system on device. Something like KeyVault which can be accessed by application within scope.

johnjeremih commented 10 months ago

How do I do that? do you have an example?