How can I add this to an open-source project without leaking token?

Open H-Ghadirian opened this issue 5 years ago • 3 comments

Hello, If I put my bot's credentials in the workflow of an opensource project then it would be visible to everyone and of course, I don't wanna do that. Is there any alternative solution?

Aug 01 '20 23:08 H-Ghadirian

Use secrets, see https://github.com/marketplace/actions/notify-telegram

Aug 07 '20 20:08 ivansky

Hello, how to use secrets? can you share an example please?

Jun 05 '23 07:06 Revdep

@Revdep https://docs.github.com/en/actions/security-guides/encrypted-secrets

Jun 05 '23 08:06 ivansky