diff --git a/scripts/gha-encrypted/README b/scripts/gha-encrypted/README
new file mode 100644
index 00000000..eb31d713
--- /dev/null
+++ b/scripts/gha-encrypted/README
@@ -0,0 +1,4 @@
+See https://help.github.com/en/actions/configuring-and-managing-workflows/creating-and-storing-encrypted-secrets
+
+Googlers: code search firebase/cpp/Secrets/quickstart to find the sources.
+
diff --git a/scripts/gha-encrypted/admob/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/admob/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..7a8dd56b
Binary files /dev/null and b/scripts/gha-encrypted/admob/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/admob/google-services.json.gpg b/scripts/gha-encrypted/admob/google-services.json.gpg
new file mode 100644
index 00000000..b62f63cb
Binary files /dev/null and b/scripts/gha-encrypted/admob/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/analytics/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/analytics/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..094a665c
Binary files /dev/null and b/scripts/gha-encrypted/analytics/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/analytics/google-services.json.gpg b/scripts/gha-encrypted/analytics/google-services.json.gpg
new file mode 100644
index 00000000..58d46136
Binary files /dev/null and b/scripts/gha-encrypted/analytics/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/auth/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/auth/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..03490af4
Binary files /dev/null and b/scripts/gha-encrypted/auth/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/auth/google-services.json.gpg b/scripts/gha-encrypted/auth/google-services.json.gpg
new file mode 100644
index 00000000..dab68319
Binary files /dev/null and b/scripts/gha-encrypted/auth/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/database/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/database/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..15e60172
Binary files /dev/null and b/scripts/gha-encrypted/database/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/database/google-services.json.gpg b/scripts/gha-encrypted/database/google-services.json.gpg
new file mode 100644
index 00000000..1e02f4d4
Binary files /dev/null and b/scripts/gha-encrypted/database/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/dynamic_links/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/dynamic_links/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..871ee6e1
Binary files /dev/null and b/scripts/gha-encrypted/dynamic_links/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/dynamic_links/google-services.json.gpg b/scripts/gha-encrypted/dynamic_links/google-services.json.gpg
new file mode 100644
index 00000000..846543f6
Binary files /dev/null and b/scripts/gha-encrypted/dynamic_links/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/firestore/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/firestore/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..15ce0866
Binary files /dev/null and b/scripts/gha-encrypted/firestore/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/firestore/google-services.json.gpg b/scripts/gha-encrypted/firestore/google-services.json.gpg
new file mode 100644
index 00000000..9067b0d5
Binary files /dev/null and b/scripts/gha-encrypted/firestore/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/functions/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/functions/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..70c4c537
Binary files /dev/null and b/scripts/gha-encrypted/functions/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/functions/google-services.json.gpg b/scripts/gha-encrypted/functions/google-services.json.gpg
new file mode 100644
index 00000000..41eed7b7
Binary files /dev/null and b/scripts/gha-encrypted/functions/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/gma/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/gma/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..58896342
Binary files /dev/null and b/scripts/gha-encrypted/gma/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/gma/google-services.json.gpg b/scripts/gha-encrypted/gma/google-services.json.gpg
new file mode 100644
index 00000000..b118a4cb
Binary files /dev/null and b/scripts/gha-encrypted/gma/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/messaging/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/messaging/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..f8581e88
Binary files /dev/null and b/scripts/gha-encrypted/messaging/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/messaging/google-services.json.gpg b/scripts/gha-encrypted/messaging/google-services.json.gpg
new file mode 100644
index 00000000..ac4e7144
Binary files /dev/null and b/scripts/gha-encrypted/messaging/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/remote_config/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/remote_config/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..67535e90
Binary files /dev/null and b/scripts/gha-encrypted/remote_config/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/remote_config/google-services.json.gpg b/scripts/gha-encrypted/remote_config/google-services.json.gpg
new file mode 100644
index 00000000..5f1cb5d2
Binary files /dev/null and b/scripts/gha-encrypted/remote_config/google-services.json.gpg differ
diff --git a/scripts/gha-encrypted/storage/GoogleService-Info.plist.gpg b/scripts/gha-encrypted/storage/GoogleService-Info.plist.gpg
new file mode 100644
index 00000000..de4c9c06
Binary files /dev/null and b/scripts/gha-encrypted/storage/GoogleService-Info.plist.gpg differ
diff --git a/scripts/gha-encrypted/storage/google-services.json.gpg b/scripts/gha-encrypted/storage/google-services.json.gpg
new file mode 100644
index 00000000..1393dce3
Binary files /dev/null and b/scripts/gha-encrypted/storage/google-services.json.gpg differ