secret w env

.harness/firebase-deploy.yaml

@@ -34,7 +34,8 @@ spec:
             spec:
               name: build
               container: andreysenov/firebase-tools
+              envs:
+                FIREBASE_CI_TOKEN: '${{ secrets.get("resume-firebase-squeaky2x3-gmail-token") }}'
               shell: sh
               script: |
-                bash ./deploy.firebase.sh '${{
-                secrets.get("resume-firebase-squeaky2x3-gmail-token") }}'
+                bash ./deploy.firebase.sh

deploy.firebase.sh

@@ -32,7 +32,11 @@ echo firebase uses squeaky2x3@gmail.com
 ! tty || firebase login
 echo firebase init
 args=()
+log_args=()
 if ! tty; then
-   args+=("--token" "$1")
+   args+=("--token" "$FIREBASE_CI_TOKEN")
+   log_args+=("--token" "${FIREBASE_CI_TOKEN:0:1}")
+   test "${FIREBASE_CI_TOKEN:0:1}" != "$"
 fi
+echo firebase deploy "${log_args[@]}"
 firebase deploy "${args[@]}"