4 ms·

Yes, you should separate "tests execute" into their own unprivileged workflows that don't have "deploy" secrets.

• rcxdude 2mo ago
  You can also do the same for the build workflow, no?
  • insanitybit 2mo ago
    Yep, I'd recommend it.