I like to start an open-source project via Github where topics (markdown pages) can be created from the community. Via PR the changes get merged to the main repo and then it triggers a Github Action workflow. Inside this workflow, the markdown input gets processed to static HTML pages which should later get deployed to an Nginx web server.

The current (prototyped) deployment is done via SCP for GitHub Actions and SSH for GitHub Actions. For both actions, I have to provide the user and password inside the workflow.yml file.

To make the project public I need another approach, where others cannot get the credentials.

How can I realize my idea?

1 Answer 1


By coincidence, I have found a possible solution via Github Secrets.

  • GitHub Secrets is indeed the way of doing it, to keep everything in the same place. You could also use an external deploy system but that's more work. Nov 19, 2020 at 0:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.