I like to start an open-source project via Github where topics (markdown pages) can be created from the community. Via PR the changes get merged to the main repo and then it triggers a Github Action workflow. Inside this workflow, the markdown input gets processed to static HTML pages which should later get deployed to an Nginx web server.
The current (prototyped) deployment is done via SCP for GitHub Actions and SSH for GitHub Actions. For both actions, I have to provide the user and password inside the workflow.yml
file.
To make the project public I need another approach, where others cannot get the credentials.
How can I realize my idea?