1. Create the token
Use a fine-grained GitHub token limited to the required repositories with Actions Variables and Secrets read/write access.
Beta
Set up GitHub Actions
Beta: inspect and import repository Actions Variables with values and Secret names without values, then sync Text or sealed Secret values. Pull via the OIDC-authenticated secrets-action is also available.
2. Identify resources
Select the repository after the connection verifies. Repository metadata is used for discovery; no secret values are returned.
3. Preview before writing
- Repository Actions Variables can be imported explicitly.
- Actions Secret names are visible but values are not.
- Environment targets remain unavailable until their promotion gate is complete.
Role-aware setup
Start guided setupAdmins connect. Everyone can follow the guide.
Organisation owners and admins can store or rotate provider credentials. Members and viewers can use this guide and ask an admin to complete the connection.