From 565948518b3efb23babc62fafab456ccbcbae0ff Mon Sep 17 00:00:00 2001 From: Murukesh Mohanan Date: Thu, 4 Mar 2021 18:02:01 +0900 Subject: [PATCH] Clarify access level needed for secrets in web interface (#2330) * Clarify access level needed for secrets in web interface Closes #1087 I considered changing the `permissions-statement-secrets-repository` reusable to include a reference to the API, but then I noticed that the other place using it (["Enabling debug logging"][1]) already mentioned the API, so instead I added a note. Including a mention of "web interface" lead to (IMO) too much duplication in text, so I rephrased it to be more like the `permissions-statement-secrets-api` reusable. [1]: https://docs.github.com/en/free-pro-team@latest/actions/managing-workflow-runs/enabling-debug-logging * Update data/reusables/github-actions/permissions-statement-secrets-repository.md I'm going to go ahead and change this back. Co-authored-by: hubwriter --- content/actions/reference/encrypted-secrets.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/content/actions/reference/encrypted-secrets.md b/content/actions/reference/encrypted-secrets.md index 6621cc6c53..c6dda65cfd 100644 --- a/content/actions/reference/encrypted-secrets.md +++ b/content/actions/reference/encrypted-secrets.md @@ -77,6 +77,12 @@ When generating credentials, we recommend that you grant the minimum permissions If your repository {% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.0"or currentVersion == "github-ae@latest" %}has environment secrets or {% endif %}can access secrets from the parent organization, then those secrets are also listed on this page. +{% note %} + +**Note:** Users with collaborator access can use the REST API to manage secrets for a repository. For more information, see "[{% data variables.product.prodname_actions %} secrets API](/rest/reference/actions#secrets)." + +{% endnote %} + {% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.0" or currentVersion == "github-ae@latest" } ### Creating encrypted secrets for an environment