4 ms·
> With the exception of GITHUB_TOKEN, secrets are not passed to the runner when a workflow is triggered from a forked repository. https://help.github.com/en/ac
by mscccc 7y ago
> With the exception of GITHUB_TOKEN, secrets are not passed to the runner when a workflow is triggered from a forked repository.
https://help.github.com/en/actions/automating-your-workflow-with-github-actions/creating-and-using-encrypted-secrets#using-encrypted-secrets-in-a-workflow https://help.github.com/en/actions/automating-your-workflow-...
- NathanKP 7y agoYeah but it only takes accidentally merging in something malicious once to have it running in the main repository now