Secrets、Variables 与 GITHUB_TOKEN | GitHub
本章覆盖：repository secret；environment secret；organization secret；variable；`GITHUB_TOKEN`；token permission；least privilege；secret masking；fork PR security boundary；secrets should not be echoed；workflow permission 应显式最小化。
本章知识点
- repository secret
- environment secret
- organization secret
- variable
GITHUB_TOKEN- token permission
- least privilege
- secret masking
- fork PR security boundary
- secrets should not be echoed
- workflow permission 应显式最小化