We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 97438e3 commit 0922905Copy full SHA for 0922905
1 file changed
.github/workflows/shared/pat_pool.README.md
@@ -111,8 +111,7 @@ This approach aligns with GitHub's documented guidance for [passing secrets][pas
111
There are several details of this implementation that keep our workflows and repositories safe.
112
113
1. **Secrets adhere to existing trust boundaries.** The pool of PAT secrets is
114
- provided to the `select-pat-number` action within the dedicated `pat_pool`
115
- job defined by [`workflow-import.md`](./workflow-import.md). That job runs
+ provided to a dedicated step within the `pat_pool` job. That job runs
116
after `pre_activation` and contains only the trusted checkout and action
117
steps--no untrusted context or input is within scope. The
118
`select-pat-number` action only references the secret values to determine
0 commit comments