Remove Google Key from the repository. Warning from GitGaurdian

[SuranjanDaw]

There is a Google Key embedded somewhere in a class or values. Remove it or put it in some other file and put it under .gitignore

[douglasdubois]

It's triggering due to the Firebase API key. That key only identifies your project to Google's servers. I can add the file to .gitignore if you want, but it doesn't pose any security vulnerability. Let me know.

[SuranjanDaw]

Put that key and any other key used in the project under a new .xml file (say key.xml) in the values folder.

[douglasdubois]

I'm confused as to what the purpose of this issue is. To my understanding, google-services.json generates a .xml in the values folder and is required when using the google service plugin. Referencing https://developers.google.com/android/guides/google-services-plugin