Revise ADR: Use the auth token to fetch the workflow repo

This commit is contained in:
eric sciple 2020-03-19 10:49:34 -04:00
parent 58070a9fc3
commit 3fcc3107db
1 changed files with 6 additions and 3 deletions

View File

@ -40,9 +40,12 @@ We want to take this opportunity to make behavioral changes, from v1. This docum
default: ${{ github.token }}
ssh-key:
description: >
SSH key used to fetch the repository. The SSH key is configured with the local
git config, which enables your scripts to run authenticated git commands.
The post-job step removes the SSH key.
The SSH key to use. The SSH key is configured with the local git config, which enables
your scripts to run authenticated git commands. The post-job step removes the SSH key.
When fetching the repository the workflow is running in, the auth token will be used
and configured instead. This enables the SSH key to be used only for submodules.
We recommend using a service account with the least permissions necessary.