Secretes are impractical for workflows with forks

[zyga]

Hello

Thank you for publishing this action!

This is more of a request for ideas rather than a bug report.
Is there a way to avoid the need for the github token as a secret? Secrets are not available, rightly so, to forks. This means that in practice a project accepting pull requests from forks cannot implement cancel-workflow-action that would work.

I'm really open to any idea that would make it work.

[styfle]

I'm really open to any idea that would make it work.

Me too! My assumption is that the GitHub API doesn’t want anyone to be able to cancel workflow runs because it could be abused.

[styfle]

The readme has been updated to use access_token: ${{ github.token }}, thanks!

[CavalcanteLeo]

@styfle how to generate the access token? (github.token)

[styfle]

You don’t need to generate it for public repos, it’s available automatically. For private repos you might need to generate a Personal Access Token.