PR open which isn't a member of the repo gets ##[error]Missing access token

[kaihendry]

https://github.com/kaihendry/dabase.com/runs/471466202 is the same as kaihendry/dabase.com#2 (comment)

I'm not sure how to address this.

[nwtgck]

@kaihendry Hello again.

I think the action was triggered by @cheeaun. I guess someone who is not a maintainer can not use the secrets. As you said before, it may be permission problem.

The latest deployment to Netlify was successful on master branch triggered by you.

[nwtgck]

I found official description about the secret on GitHub.

Secrets are not passed to workflows that are triggered by a pull request from a fork.

I found a detail explanation: Creating and storing encrypted secrets - GitHub Help. It says exception is only GITHUB_TOKEN.

[kaihendry]

hhhmmmm... so this makes this action kindof useless for external contributions then?

Or do you think we can get around the secrets limitation?

[nwtgck]

hhhmmmm... so this makes this action kindof useless for external contributions then?
I think so too...

Unfortunately, I have no workaround.

[kaihendry]

I posted on https://github.community/t5/GitHub-Actions/Secrets-for-PRs-who-are-not-collaborators/td-p/47900

I mean maybe it's kindof dangerous to have Netlify publish a site ... struggling to weigh up the risks, since the PR is on Github to begin with.

[nwtgck]

Very great! I want to keep watching the post.

[nwtgck]

This issue seems to be a general issue of GitHub Actions. So I close this.