Merge pull request #5474 from adamdmharvey/clarify-token-security

actions: Clarify Chromatic token exposure
2021-04-26 09:44:00 -04:00
parent 35e32bbf4c e0f43ae453
commit ac23d56d60
1 changed files with 2 additions and 0 deletions
@@ -48,5 +48,7 @@ jobs:
      - uses: chromaui/action@v1
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
+          # projetToken intentionally shared to allow collaborators to run Chromatic on forks
+          # https://www.chromatic.com/docs/custom-ci-provider#run-chromatic-on-external-forks-of-open-source-projects
          projectToken: 9tzak77m9nj
          storybookBuildDir: 'packages/storybook/dist'