Skip to main content

Security guides

Security hardening and good practices for GitHub Actions.

Security hardening for GitHub Actions

Good security practices for using GitHub Actions features.

Using secrets in GitHub Actions

Learn how to create secrets at the repository, environment, and organization levels for GitHub Actions workflows.

Use GITHUB_TOKEN in workflows

Learn how to use the GITHUB_TOKEN to authenticate on behalf of GitHub Actions.

Using GitHub's security features to secure your use of GitHub Actions

GitHub has several security features that can enhance the security of the actions you consume and publish.