Skip to content

Commit 94d5945

Browse files
authored
Update manage-encrypted-secrets.md
1 parent 1be07be commit 94d5945

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

learn-pr/github/manage-github-actions-enterprise/includes/manage-encrypted-secrets.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -154,7 +154,7 @@ Security hardening for GitHub Actions plays a role in keeping your software supp
154154

155155
Some best practices for mitigating script injection attacks on GitHub actions include:
156156

157-
1. *Use Javascript actions instead of inline scripts*: Use JavaScript actions that accept context values as arguments instead of embedding those values in inline scripts. This approach reduces the risk of script injection because the context data is not used to generate or execute shell commands directly.
157+
1. *Use Javascript actions instead of inline scripts*: Use Javascript actions that accept context values as arguments instead of embedding those values in inline scripts. This approach reduces the risk of script injection because the context data is not used to generate or execute shell commands directly.
158158

159159
Passing a variable as an input to a JavaScript action helps prevent it from being used in a script injection attack.
160160

@@ -523,7 +523,7 @@ Many enterprises integrate GitHub Actions with external secret management soluti
523523
azureCredentials: ${{ secrets.AZURE_CREDENTIALS }}
524524
```
525525

526-
### Benefits of using third-Party vaults
526+
### Benefits of using third-party vaults
527527
- **Centralized secret management** reduces security risks.
528528
- **Automated secret rotation** helps comply with security policies.
529529
- **Audit logs and access control** enhance security monitoring.

0 commit comments

Comments
 (0)