Managing secrets in UCB

I'm looking for a solid way to manage secrets like api keys, passwords, etc on Cloud Build. I want to avoid having to commit those sensitive values to the repository, because having those in there is bad practice, but I can't figure out how to do that with Cloud Build.

GitHub for example, has a secrets manager, is something similar possible with Cloud Build (but I just can't find it)? Or is this a feature that is on the roadmap? How do other developers handle secrets on Cloud Build?

Thanks!

 

I'm also looking for this. Did you find anything?
I did use environment variables to include some secrets in a post build bash script. Maybe that approach can also be used for other things? Idk..

 

https://answers.unity.com/questions/1580580/is-there-any-way-to-set-environment-variables-to-c.html