Skip to main content

297 Search results for "secrets"

Code security / Secret scanning /

Managing alerts from secret scanning

from secret scanning Learn how to find, evaluate, and resolve alerts for secrets stored in your repository. About secret scanning alerts Learn about the

REST API / Authentication /

Endpoints available for fine-grained personal access tokens

/orgs/{org}/actions/secrets GET /orgs/{org}/actions/secrets/public-key GET /orgs/{org}/actions/secrets/{secret_name} PUT /orgs/{org}/actions/secrets/{secret_name}

REST API / Authentication /

Endpoints available for GitHub App user access tokens

/orgs/{org}/actions/secrets GET /orgs/{org}/actions/secrets/public-key GET /orgs/{org}/actions/secrets/{secret_name} PUT /orgs/{org}/actions/secrets/{secret_name}

REST API / Authentication /

Endpoints available for GitHub App installation access tokens

/orgs/{org}/actions/secrets GET /orgs/{org}/actions/secrets/public-key GET /orgs/{org}/actions/secrets/{secret_name} PUT /orgs/{org}/actions/secrets/{secret_name}

Code security / Secret scanning / Manage alerts /

Resolving alerts from secret scanning

secret compromised. GitHub recommends the following actions for compromised secrets: Verify that the secret committed to GitHub is valid. Applies to GitHub

REST API / Secret scanning /

REST API endpoints for secret scanning

REST API/ Secret scanning/ Secret scanning REST API endpoints for secret scanning Use the REST API to retrieve and update secret alerts from a repository

GitHub Actions / Security / Security guides /

Automatic token authentication

GITHUB_TOKEN by using the standard syntax for referencing secrets: ${{ secrets.GITHUB_TOKEN }}. Examples of using the GITHUB_TOKEN include passing the

Code security / Secure your organization / Manage organization security /

Interpreting security findings

issues, pull requests, and discussions in those repositories, for leaked secrets that have been accidentally committed, such as tokens or private keys. There

GitHub Actions / Share automations /

Reusing workflows

called workflow is automatically granted access to github.token and secrets.GITHUB_TOKEN. For more information about the github context, see "Accessing

Apps / Creating GitHub Apps / About creating GitHub Apps /

Best practices for creating a GitHub App

information, see "Managing private keys for GitHub Apps." Client secrets Client secrets are used to generate user access tokens for your app, unless your