Should we use github secrets for sensitive information?

[HeitorMatt]

" Secrets are environment variables that are encrypted and only exposed to selected actions. Anyone with collaborator access to this repository can use these secrets in a workflow. "
Is this a good idea?

[matheusmota]

+1!
We definitely should use this feature, specially considering keys and other sensitive information.
Does anyone have experience with this?

[marcosfmmota]

Completely forgot about this feature, GitHub secrets are really important for project like ours. I don't have experience with it but I saw an use case with GitHub actions. I'm going to check it out how to use it because maybe it is only accessible using Actions and thus imply change our current CI/CD structure.