nodejs / nodejs/build

Clarify policy: usage of production tokens in GitHub Actions

Open
#4,253 0 comments 0 reactions 1 assignee View on GitHub

@UlisesGascon is already working on this.

Since Feb 21, 2026.

Dominant language
Jinja
Stars
542
Forks
185
Avg merge
22h 15m
Merged PRs (30d)
4

Description

In the past we didn't reach a clear/possitive consensus on the usage of production tokens (jenkins release, mailgun, etc...) on Github Actions due security concerns. Is this the current status?

Usage example: https://github.com/nodejs/email/pull/222.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.