The ability to keep secret values is an essential feature in any CI/CD pipeline implementation tool because some parameters/variables are sensitive information that cannot be stored openly. Further, programmatically allowing access to third parties may be necessary. Authentication should be provided using tokens.
This chapter explores the options for keeping secrets in GitHub Actions and generating tokens to provide programmatic access to GitHub.