How to keep service account key (.json) when deploying

Hi guys! I'm writing an express app which running firebase admin sdk. Google gave me a json file of service account key to let my server enter its console. My question is how do I upload this file when deploying since this is a sensitive file? Thanks