firebase-hosting-basics

Iron Law

NO FIREBASE HOSTING DEPLOY WITHOUT WORKLOAD IDENTITY FEDERATION.

CI/CD uses GitHub Actions + WIF — never long-lived service account JSON keys. The GOOGLE_APPLICATION_CREDENTIALS environment variable must never point to a key file in any workflow or .env file.

Project Context

Before using this skill:

• Check CLAUDE.md for the project's build tool and output path (e.g. dist/)
• Confirm the firebase.json location (typically repo root)
• Confirm whether a hosting block already exists in firebase.json