What do you do to enable repo's secrets to contributors?

[dianjuar]

Hi 👋

I wonder how you made it possible to share the secret CODECOV_TOKEN to contributors?

I made a PR to this repo, and the code coverage service did its work. It commented on the PR, which made me think that my PR had access to that secret.

I'm saying this because, on my repo, a first-time contributor made a PR. On the CI configuration, a step requires access to a token placed on secrets, but the PR doesn't have access to the repo's secrets and is causing its failure.

The repo's secrets configuration page says:

Secrets are environment variables that are encrypted. Anyone with collaborator access to this repository can use these secrets for Actions.

Secrets are not passed to workflows that are triggered by a pull request from a fork. Learn more.

So I wonder, how did you make it possible?

[edbzn]

Hey @dianjuar sorry I didn't see the notification. Did you find the answer? I do nothing special to make tokens available for the forks.

[dianjuar]

I couldn't find the answer.

I gave up, I don't know how to solve that situation.
It's very frustrating, it's failing even with dependabot commits.