docs Documentation about secrets for step condition could elaborate on implications of the approach

Documentation about secrets for step condition could elaborate on implications of the approach

Open m-kuhn opened this issue 2 years ago • 10 comments

I think this would deserve a hint on the implication that the secret is leaked to every step within the job, regardless if it's required for a certain step or not (hence violating the principle of least privilege).

Originally posted by @m-kuhn in https://github.com/github/docs/issues/12722#issuecomment-1172714298

Jul 08 '22 22:07 m-kuhn

Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

Jul 08 '22 22:07 welcome[bot]

@m-kuhn Thanks for opening a new issue for this. I'll get it triaged for review! ⚡

Jul 11 '22 18:07 cmwilson21

Thanks for opening an issue! We've triaged this issue for technical review by a subject matter expert :eyes:

Jul 12 '22 04:07 github-actions[bot]

Thanks also