Secrets and Environments

A deployment needs credentials, settings and, for production, a person's approval. This section gives BookNest a demo secret (a random string, not a real credential), a variable, staging and production environments, and a manual deploy.yml workflow that goes through both.

Subsections

• Secret Scopes
• Variables vs Secrets
• Staging and Production
• Reviewers and Timers
• Deployment Restrictions
• Secret Hygiene
• Dependabot Secrets