Skip to content

Commit 8c13128

Browse files
Clarify Actions secrets unavailable for Dependabot-triggered workflows (#57036)
Co-authored-by: mc <[email protected]>
1 parent 0123c11 commit 8c13128

File tree

1 file changed

+2
-1
lines changed
  • content/actions/how-tos/write-workflows/choose-what-workflows-do

1 file changed

+2
-1
lines changed

content/actions/how-tos/write-workflows/choose-what-workflows-do/use-secrets.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -167,7 +167,8 @@ You can check which access policies are being applied to a secret in your organi
167167
> [!NOTE]
168168
> * {% data reusables.actions.forked-secrets %}
169169
> * Secrets are not automatically passed to reusable workflows. For more information, see [AUTOTITLE](/actions/using-workflows/reusing-workflows#passing-inputs-and-secrets-to-a-reusable-workflow).
170-
> {% data reusables.actions.about-oidc-short-overview %}
170+
> * Secrets are not available to workflows triggered by {% data variables.product.prodname_dependabot %} events. For more information, see [AUTOTITLE](/code-security/dependabot/troubleshooting-dependabot/troubleshooting-dependabot-on-github-actions#accessing-secrets).
171+
> * {% data reusables.actions.about-oidc-short-overview %}
171172
172173
> [!WARNING] Mask all sensitive information that is not a {% data variables.product.prodname_dotcom %} secret by using `::add-mask::VALUE`. This causes the value to be treated as a secret and redacted from logs.
173174

0 commit comments

Comments
 (0)