Okay, one way or the way we need to manage those secrets, you can also take a look at the Cloud Build way of doing it.

https://cloud.google.com/cloud-build/docs/securing-builds/use-encrypted-secrets-credentials