GitHub Community
-
roadmap item #636 allow secrets in called reusable workflowProduct Feedback BodyGuys can someone provide an eta as to when github/roadmap#636 will be implemented ? I have literally just started using github actions and want to use reusable workflows but need to protect cert (image signing) from the calling actions / users being able to access the cert. I am amazed this feature hasn't been implemented already ! Yet all i see is it being pushed back with the last update sept 23. So a year ago. This feature needs adding asap. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
Hey! Sadly we have no timeline for this one and as it kept moving around just put it into 'future' which means it's not this year for us at least. We will keep our roadmap updated as the source of truth for when for this :) |
Beta Was this translation helpful? Give feedback.
-
|
can you explain then how teams would go about creating a secure build pipeline if you can't prevent the caller repo from access the certificates ?? Perhaps I am missing something ? |
Beta Was this translation helpful? Give feedback.
Hey! Sadly we have no timeline for this one and as it kept moving around just put it into 'future' which means it's not this year for us at least. We will keep our roadmap updated as the source of truth for when for this :)