Selective Secret Exposure for Forked Pull Requests
Context In GitHub Actions, repository secrets are omitted when a workflow runs on a pull request originating from a forked repository. Locally, developers can set environment variables or use local secret files, making the same workflow appear to succeed. In production, the missing secrets cause the job to fail. Unresolved Decision The core issue is whether
github