eclipse-score / eclipse-score/infrastructure
github secrets from forks
Open
good first issue
- Dominant language
- Python
- Stars
- 0
- Forks
- 4
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 6
Description
We need to run workflows which have access to secrets. This is currently not possible.
Two common ways to achieve that is using `pull_request_target` instead of `pull_request` and the other is using environments.
Acceptance Criteria:
* Provide guide when to use which approach
* Focus on constraints and security implications (e.g., risks of running untrusted code with access to secrets)
Contributor guide
Assessment
This issue has not been assessed yet.