Checkout Submodules in GitHub Actions with Least Privilege

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

The default credentials available in GitHub Actions do not allow access to other repositories; therefore, submodules cannot be checked out. GitHub Actions uses a GitHub App installed on the repository to generate an installation access token, which expires when a job completes or after 24 hours, whichever comes first. This token is a secret variable accessible at secrets.GITHUB_TOKEN or in the…

Read on micah.soy ↗