First things first, let's get the Supabase CLI installed. This tool will let you manage your Supabase projects right from your terminal.

npm install -g supabase

Head over to your project directory and kick off Supabase.

supabase init

This command will set up all the necessary config files in your project directory. Also, don't forget to log into your Supabase account:

supabase login

In your CI/CD pipeline environment (like GitHub Actions or GitLab CI), add your Supabase credentials as environment variables.

For instance, in GitHub Actions:

env:
  SUPABASE_API_URL: ${{ secrets.SUPABASE_API_URL }}
  SUPABASE_API_KEY: ${{ secrets.SUPABASE_API_KEY }}

Make sure these secrets are safely stored in your repository's secrets section.

Create a script to handle database migrations in your CI/CD setup. This script will run every time you deploy.

#!/bin/sh

# Apply Supabase migrations
supabase db push --project-ref your_project_ref --api-url $SUPABASE_API_URL --api-key $SUPABASE_API_KEY

Make this script executable:

chmod +x supabase-migrate.sh

Now, let's integrate the migration script into your CI/CD pipeline configuration. Here's an example using GitHub Actions.

Create a .github/workflows/deploy.yml file:

name: Deploy

on:
  push:
    branches:
      - main

jobs:
  migrate:
    runs-on: ubuntu-latest
    steps:
    - name: Checkout code
      uses: actions/checkout@v2

    - name: Install Supabase CLI
      run: npm install -g supabase

    - name: Run Supabase Migrations
      env:
        SUPABASE_API_URL: ${{ secrets.SUPABASE_API_URL }}
        SUPABASE_API_KEY: ${{ secrets.SUPABASE_API_KEY }}
      run: ./supabase-migrate.sh

Push your changes to the repository and keep an eye on the CI/CD pipeline to make sure the Supabase migration script runs as expected. Check that the database updates are applied correctly.

Always make sure your Supabase credentials are stored securely. Use your CI/CD provider's built-in secrets management system to keep these sensitive details safe.

env:
  SUPABASE_API_URL: ${{ secrets.SUPABASE_API_URL }}
  SUPABASE_API_KEY: ${{ secrets.SUPABASE_API_KEY }}

Regularly rotate these keys and update the secrets accordingly to keep things secure.