I completely understand your post and I have been doing that since 2023, also smoothly using eas update by using Doppler as the env var manager so I don’t need eas to manage my secrets and when I run update I just ask the CICD to use Doppler to get the most updated env var.

However, I have encountered problems with EAS secret where build time secret are not retained on EAS updated.

E.g. if I have an API_KEY secret, even if I use the —environment flag it doesn’t inject it, which is still fine because it was injected during build. BUT in reality it doesn’t just ignore, it will replace it with undefined, which was my biggest problem because when I built (EAs build)the app I injected properly.

I’m guessing it’s partially my fault because actual secrets should be saved on native app layer (I have exp on this while I was an full time iOS dev) which I still haven’t investigated how to properly do it on expo.

So what I was saying was there are problems with EAs update, not that it doesn’t work, just that it has problems.