Add Set Repository Secret From CLI as a GitHub Actions TIL

github-actions/set-repository-secret-from-cli.md

@@ -0,0 +1,31 @@
+# Set Repository Secret From CLI
+
+I set up a GitHub Action that will run daily and potentially push data up to a
+3rd-party API. To be able to post to that API, the action must include a secret
+as the bearer token in the requests. I need to securely include that secret in
+the GitHub Actions environment for this repo.
+
+I can do that from the CLI with `gh` like so:
+
+```bash
+❯ gh secret set TIL_SYNC_TOKEN
+? Paste your secret: ****************************************************************
+```
+
+Notice that it prompts me for the secret and stars out what I paste in. That way
+the secret doesn't end up in my bash history and isn't visible on my screen.
+
+After I've run this, I can see that the secret is set by opening up the repo in
+the GitHub web UI, clicking on _Settings_ > _Secrets and Variables_ > _Actions_.
+I should see `TIL_SYNC_TOKEN` listed under the _Repository Secrets_ section.
+
+Here is an excerpt from my workflow action sync script where that secret is
+referenced -- notice the `${{ secrets.TIL_SYNC_TOKEN }}`.
+
+```yaml
+      - name: Sync posts
+        env:
+          TIL_SYNC_URL: ${{ vars.TIL_SYNC_URL }}
+          TIL_SYNC_TOKEN: ${{ secrets.TIL_SYNC_TOKEN }}
+        run: ruby script/til_sync/til_sync.rb --repo til ${{ inputs.all && '--all' || '--days 3' }}
+```