Skip to content

Commit

Permalink
Update docs/USAGE.md
Browse files Browse the repository at this point in the history
Co-authored-by: Manuel Spigolon <[email protected]>
  • Loading branch information
dominykas and Eomm authored Jan 5, 2022
1 parent 55338b7 commit a1be3b7
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion docs/USAGE.md
Original file line number Diff line number Diff line change
Expand Up @@ -253,7 +253,11 @@ A JSON object with the secret environment variables to be set for the 'Run tests

Note: make sure that your secrets are valid JSON strings (you can escape them by using [`toJSON` expression](https://docs.github.com/en/actions/learn-github-actions/expressions#tojson))

⚠️ Important: ⚠️ while care has been taken to mask the secret values in log output (the input JSON as a whole and the individual values), there might exist a chance of leaking them via the publicly available UIs, as there is no official Github Actions support for passing arbitrary environment variables and secrets into re-usable workflows. The implementation of `test-secrets` is, generally, a workaround for the limitation that re-usable workflows do not receive the environment of the calling workflow.
⚠️ Security Warning: ⚠️

While care has been taken to mask the secret values in log output (the input JSON as a whole and the individual values), there might exist a chance of leaking them via the publicly available UIs.
There is no official Github Actions support for passing arbitrary environment variables and secrets into re-usable workflows.
The implementation of `test-secrets` is, generally, a workaround for the limitation that re-usable workflows do not receive the environment of the calling workflow.

#### Example

Expand Down

0 comments on commit a1be3b7

Please sign in to comment.