# Accessing files in "Code Signing & Files"

**URL:** <https://discuss.bitrise.io/t/accessing-files-in-code-signing-files/953>\
**Category:** Question & Answer\
**Created:** [February 24, 2017, 7:05pm UTC](https://discuss.bitrise.io/t/accessing-files-in-code-signing-files/953 "2017-02-24T19:05:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![leeflannery](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.bitrise.io/leeflannery/32/491_2.png) [@leeflannery](https://discuss.bitrise.io/u/leeflannery)\
**Post date:** [February 24, 2017, 7:05pm UTC](https://discuss.bitrise.io/t/accessing-files-in-code-signing-files/953/1 "2017-02-24T19:05:08Z")

</div>

Hi all -

When I upload a file to “Code Signing & Files” Bitrise generates a URL for me.

Is this secure … ? Can I use that URL if it were, say, a Service Account JSON key file’s url, in a build step? Or is that publicly accessible?

Basically I’d like to access a JSON key file to upload to the Google Play Store without sticking it in my repository.

Thanks -  
Lee

---

<div class="post-metadata">

**Author:** ![viktorbenei](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.bitrise.io/viktorbenei/32/18_2.png) [@viktorbenei](https://discuss.bitrise.io/u/viktorbenei)\
**Post date:** [February 24, 2017, 8:11pm UTC](https://discuss.bitrise.io/t/accessing-files-in-code-signing-files/953/2 "2017-02-24T20:11:39Z")

</div>

Hi,

> [@leeflannery](#):
>
> Basically I’d like to access a JSON key file to upload to the Google Play Store without sticking it in my repository.

You can use the [Generic File Storage](http://devcenter.bitrise.io/tutorials/how-to-use-the-generic-file-storage/) feature to store files on [bitrise.io](https://www.bitrise.io), and get a time limited / expiring download url through an environment variable for every build.

> [@leeflannery](#):
>
> Is this secure … ? Can I use that URL if it were, say, a Service Account JSON key file’s url, in a build step? Or is that publicly accessible?

I think this devcenter section answers your question : [Code security - Bitrise Docs](http://devcenter.bitrise.io/getting-started/code-security/#code-signing-and-other-files)

If it wouldn’t, feel free to ask any questions!

---

<div class="post-metadata">

**Author:** ![leeflannery](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.bitrise.io/leeflannery/32/491_2.png) [@leeflannery](https://discuss.bitrise.io/u/leeflannery)\
**Post date:** [February 28, 2017, 3:27pm UTC](https://discuss.bitrise.io/t/accessing-files-in-code-signing-files/953/3 "2017-02-28T15:27:32Z")

</div>

Thanks Viktor, yes, this helps!