How to safely pass authorization data to an application on github?

Question

JavaScript

I want to connect firebase storage and authentication to my test application, for this you need to write authorization data in the file, such as an api key, when pushing to github, it gives a warning that there are sensitive data in the project. How to keep the site up on github pages along with storage and authentication from firebase, but hide this data from the user?

Answer 1

All your secret keys, if they get into the build, will be visible to everyone who is not too lazy to open f12.
What's in Firebase Docks? How do they recommend using it?
Didn't work with Firebase, but worked with an analogue - Supabase. There, the key is the project ID, nothing more. Maybe you just have a project ID key?

Answer 2

such data should be in the .env file, which in turn should be in .gitignore