Override Laravel Vapor's Secrets management

.gitlab-ci.yml

stages:
  - deploy

.setup_staging_env_file: &setup_staging_env_file |
  echo "$STAGING_SECRETS" > staging_secrets.php

.setup_production_env_file: &setup_production_env_file |
  echo "$PRODUCTION_SECRETS" > production_secrets.php

staging:
  script:
    - *setup_staging_env_file
    - vapor deploy staging

production:
  script:
    - *setup_production_env_file
    - vapor deploy production

composer.json

{
    "autoload": {
        "files": [
            "vendor-overrides/laravel/vapor-core/src/Runtime/Secrets.php"
        ],
        "exclude-from-classmap": [
            "vendor/laravel/vapor-core/src/Runtime/Secrets.php"
        ]
    }
}

Secrets.php

<?php

namespace Laravel\Vapor\Runtime;

/**
 * We're overriding Vapor's original class witht this one using composer.
 * Make sure it's located in this path:
 * vendor/laravel/vapor-core/src/Runtime/Secrets.php
 */
class Secrets
{
    public static function addToEnvironment($path, $parameters, $file)
    {
        echo 'Overriden Secrets management'.PHP_EOL;

        /**
         * Extract the path to project root.
         * Vapor will automatically call this method when building
         * the project, and will provide the path to vaporSecrets.php
         * which will be located at the root.
         */
        $path = str_replace('vaporSecrets.php', '', $file);

        if (file_exists($path.'staging_secrets.php')) {
            $parameters = require $path.'staging_secrets.php';
        }
        if (file_exists($path.'production_secrets.php')) {
            $parameters = require $path.'production_secrets.php';
        }

        return tap($parameters, function ($variables) {
            foreach ($variables as $key => $value) {
                echo "Injecting secret [{$key}] into runtime.".PHP_EOL;
                $_ENV[$key] = $value;
                $_SERVER[$key] = $value;
            }
        });
    }
}

STAGING_SECRETS

<?php
// Store this files as a regular text variable in GitLab CI
return [
    'SECRET_1' => 'foo',
    'SECRET_2' => 'bar',
    // This variable contains a double $$ to overcome interpolation in GitLab CI
    'SECRET_3' => '7iryufv1gui2hj$$C&F)Jfghsajsb@a(&YFV',
];