A GitHub Actions workflow wants to publish and install a package that is associated with the same repository where the workflow runs. Which credential can it use without storing a personal access token?

Question

Accepted Answer

A. `GITHUB_TOKEN`. GitHub Docs state that workflows can use `GITHUB_TOKEN` to publish and install packages associated with the workflow repository. Option b is wrong because deploy keys provide Git access to repositories, not package-registry authentication for this use case.

A GitHub Actions workflow wants to publish and install a package that is associated with the same repository where the workflow runs. Which credential can it use without storing a personal access token?

Related Questions

Discussion