You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Turns out Dependabot-triggered Actions use Dependabot secrets, not Actions
secrets. In the Action, the password must be base64 encoded, but in the
Dependabot configuration it must not, so we need three secrets:
* GitHub Action secret: base64 encoded password
* Dependabot secret: base64 encoded password
* Dependabot secret: plain text password
There's no reasonable way to base64 encode the secret on-the-fly.
See: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions
0 commit comments