Security and Permissions

This section introduces the security mechanisms of AtomGit Action, including Secrets management, Token permission control, and security best practices for PR/MR pipelines.

📄️ Managing Sensitive Information with Secrets

This document introduces how to create encrypted Secrets at the organization and project levels, securely reference them in workflows, and understand their log masking and Fork isolation mechanisms.

📄️ Token Permissions and Least Privilege

This document introduces the automatic generation mechanism of ATOMGIT_TOKEN, the configuration method of the permissions field, and practical examples of the principle of least privilege.

📄️ PR/MR Pipeline Security

This document introduces the security differences between the pullrequest and pullrequest_target trigger events, helping to choose the correct fork PR pipeline configuration.