SSH deploy w/ semantic-release in a GitHub Action

[schie]

Hello!

Does anyone have any guidance on how to use SSH deploy keys w/ semantic-release in a GitHub Action?

Per the docs, there are a number of vulnerabilities w/ using a one's personal access token as the GH_TOKEN to push to protected branches.

There is documentation for the Circle CI or Travis CI regarding how to do this, but nothing for Actions.

The only way I can think to get the action to write to the protected branch is to have a machine user as part of the org w/ the necessary permissions, but that seems like a bit overkill.

thanks!

[gr2m]

For what it's worth, I use bot users all the time for things like this.

[schie]

yeah, I'll probably follow suit.

[schie]

@gr2m how are bot's permissions and protected branch set up?

I keep running into protected branch issues.