[CHORE/#665] GitHub Secrets Cleanup and CI/CD Workflow Security Improvements

.github/workflows/deploy-qa.yml

@@ -27,14 +27,14 @@ jobs:
 
       - name: Create required files from secrets
         env:
-          GOOGLE_SERVICES_JSON_CONTENT: ${{ secrets.GOOGLE_SERVICES_JSON }}
+          GOOGLE_SERVICES_JSON: ${{ secrets.GOOGLE_SERVICES_JSON }}
           DEBUG_KEYSTORE_BASE64: ${{ secrets.DEBUG_KEYSTORE_BASE64 }}
-          LOCAL_PROPERTIES_CONTENT: ${{ secrets.LOCAL_PROPERTIES }} # 수정된 시크릿 이름
+          LOCAL_PROPERTIES: ${{ secrets.LOCAL_PROPERTIES }}
         run: |
-          echo "$GOOGLE_SERVICES_JSON_CONTENT" > app/google-services.json
+          printf "%s" "$GOOGLE_SERVICES_JSON" > app/google-services.json
           mkdir -p keystore
           echo "$DEBUG_KEYSTORE_BASE64" | base64 --decode > keystore/hilingual-debug-key.jks
-          echo "$LOCAL_PROPERTIES_CONTENT" > local.properties
+          printf "%s" "$LOCAL_PROPERTIES" > local.properties
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1
@@ -48,8 +48,8 @@ jobs:
       - name: Deploy to Firebase App Distribution
         env:
           FIREBASE_APP_ID_DEBUG: ${{ secrets.FIREBASE_APP_ID_DEBUG }}
-          FIREBASE_SERVICE_ACCOUNT_JSON_CONTENT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_JSON }}
+          FIREBASE_SERVICE_ACCOUNT_JSON: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_JSON }}
         run: |
-          echo "$FIREBASE_SERVICE_ACCOUNT_JSON_CONTENT" > firebase_credentials.json
+          printf "%s" "$FIREBASE_SERVICE_ACCOUNT_JSON" > firebase_credentials.json
           export FIREBASE_SERVICE_CREDENTIALS_JSON_PATH="$(pwd)/firebase_credentials.json"
           bundle exec fastlane android qa

.github/workflows/deploy-release.yml

@@ -38,11 +38,11 @@ jobs:
           RELEASE_KEYSTORE_BASE64: ${{ secrets.RELEASE_KEYSTORE_BASE64 }}
           PLAY_STORE_JSON_KEY: ${{ secrets.PLAY_STORE_JSON_KEY }}
         run: |
-          echo "$GOOGLE_SERVICES_JSON" > app/google-services.json
-          echo "$LOCAL_PROPERTIES" > local.properties
+          printf "%s" "$GOOGLE_SERVICES_JSON" > app/google-services.json
+          printf "%s" "$LOCAL_PROPERTIES" > local.properties
           mkdir -p keystore
           echo "$RELEASE_KEYSTORE_BASE64" | base64 --decode > keystore/hilingual-release-key.jks
-          echo "$PLAY_STORE_JSON_KEY" > play_store_api_key.json
+          printf "%s" "$PLAY_STORE_JSON_KEY" > play_store_api_key.json
 
       - name: Build Release Bundle
         run: ./gradlew bundleRelease

.github/workflows/pr_checker.yml

@@ -31,12 +31,8 @@ jobs:
         env:
           LOCAL_PROPERTIES: ${{ secrets.LOCAL_PROPERTIES }}
         run: |
-          if [ -n "$LOCAL_PROPERTIES" ]; then
-            echo "${LOCAL_PROPERTIES}" > local.properties
-            echo "sdk.dir=$ANDROID_SDK_ROOT" >> local.properties
-          else
-            echo "LOCAL_PROPERTIES secret not found. Skipping."
-          fi
+          printf "%s" "$LOCAL_PROPERTIES" > local.properties
+          echo "sdk.dir=$ANDROID_SDK_ROOT" >> local.properties
 
       - name: Grant permission to gradlew
         run: chmod +x ./gradlew
@@ -67,33 +63,21 @@ jobs:
         env:
           LOCAL_PROPERTIES: ${{ secrets.LOCAL_PROPERTIES }}
         run: |
-          if [ -n "$LOCAL_PROPERTIES" ]; then
-            echo "${LOCAL_PROPERTIES}" > local.properties
-            echo "sdk.dir=$ANDROID_SDK_ROOT" >> local.properties
-          else
-            echo "LOCAL_PROPERTIES secret not found. Skipping."
-          fi
+          printf "%s" "$LOCAL_PROPERTIES" > local.properties
+          echo "sdk.dir=$ANDROID_SDK_ROOT" >> local.properties
 
       - name: Decode and install debug keystore
         env:
           DEBUG_KEYSTORE_BASE64: ${{ secrets.DEBUG_KEYSTORE_BASE64 }}
         run: |
-          if [ -n "$DEBUG_KEYSTORE_BASE64" ]; then
-            mkdir -p ./keystore
-            echo "$DEBUG_KEYSTORE_BASE64" | base64 --decode > ./keystore/hilingual-debug-key.jks
-          else
-            echo "DEBUG_KEYSTORE_BASE64 secret not found. Skipping."
-          fi
+          mkdir -p ./keystore
+          echo "$DEBUG_KEYSTORE_BASE64" | base64 --decode > ./keystore/hilingual-debug-key.jks
 
       - name: Create google-services.json
         env:
           GOOGLE_SERVICES_JSON: ${{ secrets.GOOGLE_SERVICES_JSON }}
         run: |
-          if [ -n "$GOOGLE_SERVICES_JSON" ]; then
-            echo "$GOOGLE_SERVICES_JSON" > ./app/google-services.json
-          else
-            echo "GOOGLE_SERVICES_JSON secret not found. Skipping."
-          fi
+          printf "%s" "$GOOGLE_SERVICES_JSON" > ./app/google-services.json
 
       - name: Grant permission to gradlew
         run: chmod +x ./gradlew