> > > > If we ban persisted credentials in the checkout action it becomes very hard > to commit the static website build. My example is what triggered this > whole conversation about how they are persisted because this is how it > works for us today, which I guess was not common knowledge. >
This is where https://github.com/ad-m/github-push-action can be used. Super easy to use (and verify if you use submodules) and it requires passing ("secrets.GITHUB_TOKEN") directly. Highly recommended. We use it for months. It was written by my friend (identical twin brother of Kamil with whom I work on Airflow) . -- +48 660 796 129