How can I add this to an open-source project without leaking token?

yanzay / notify-telegram

GitHub Action: Build notifications for Telegram

MIT License

62 stars 21 forks source link

How can I add this to an open-source project without leaking token? #2

Open H-Ghadirian opened 4 years ago

H-Ghadirian commented 4 years ago

Hello, If I put my bot's credentials in the workflow of an opensource project then it would be visible to everyone and of course, I don't wanna do that. Is there any alternative solution?

ivansky commented 4 years ago

Use secrets, see https://github.com/marketplace/actions/notify-telegram

Revdep commented 1 year ago

Hello, how to use secrets? can you share an example please?

ivansky commented 1 year ago

@Revdep https://docs.github.com/en/actions/security-guides/encrypted-secrets