Never Name GitHub Actions Secrets GITHUB_*
never-name-gha-secrets-github-prefix · always_apply: yes
Content
Do not name GitHub Actions repository secrets with the GITHUB_ prefix (for example GITHUB_PAT). GitHub rejects that prefix. Use AWS_DEPLOY_ROLE_ARN for OIDC and OPSLAKE_GITHUB_PAT (or similar) for the GitHub API token, then sync the PAT into Secrets Manager from populate-lake.
Details
- Slug:
never-name-gha-secrets-github-prefix- Always apply:
- Yes
- Created:
- Sep 15, 2026
- Updated:
- Sep 15, 2026
Playbook
Activities 2
- Backfill Historical GitHub Events Build the Operational Data Lake Pipeline
- Deploy via GitHub Actions Model and Deploy Infrastructure as Code