DEV Community

[Comment from a deleted post]
Collapse
 
michaelcurrin profile image
Michael Currin • Edited

Regarding commit changes as in your docs, would you consider using the builtin token for GH Actions instead of making a custom access token? It requires zero setup and is way more secure (it isn't not visible or usable outside a workflow while an access token gets write access to all your repos so it is risky to have it leaked by any weak or malicious Actions one uses)

See the recommendation for push action docs.

github_token: ${{ secrets.GITHUB_TOKEN }}
Enter fullscreen mode Exit fullscreen mode