From d03156b5b87293bfcac690d17511cb25c89bd3af Mon Sep 17 00:00:00 2001 From: Ariel Elkin <1756909+arielelkin@users.noreply.github.com> Date: Wed, 15 Dec 2021 10:17:09 +0000 Subject: [PATCH] Update README.md --- README.md | 18 ++++++++++++++---- 1 file changed, 14 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 775cee5..1d4970e 100644 --- a/README.md +++ b/README.md @@ -49,6 +49,9 @@ Refer [here](https://github.com/actions/checkout/blob/v1/README.md) for previous # with the local git config, which enables your scripts to run authenticated git # commands. The post-job step removes the PAT. # + # If any of the submodules are private GitHub repos, pass in a PAT with read-access + # to them. + # # We recommend using a service account with the least permissions necessary. Also # when generating a new PAT, select the least scopes necessary. # @@ -100,8 +103,8 @@ Refer [here](https://github.com/actions/checkout/blob/v1/README.md) for previous # Whether to checkout submodules: `true` to checkout submodules or `recursive` to # recursively checkout submodules. # - # When the `ssh-key` input is not provided, SSH URLs beginning with - # `git@github.com:` are converted to HTTPS. + # When neither the `ssh-key` nor the `token` inputs are provided, SSH URLs + # beginning with `git@github.com:` are converted to HTTPS. # # Default: false submodules: '' @@ -185,12 +188,19 @@ Refer [here](https://github.com/actions/checkout/blob/v1/README.md) for previous uses: actions/checkout@v2 with: repository: my-org/my-private-tools - token: ${{ secrets.GH_PAT }} # `GH_PAT` is a secret that contains your PAT + token: ${{ secrets.GH_PAT }} # `GH_PAT` is a secret that contains a PAT with read-access to this private repository path: my-tools ``` -> - `${{ github.token }}` is scoped to the current repository, so if you want to checkout a different repository that is private you will need to provide your own [PAT](https://help.github.com/en/github/authenticating-to-github/creating-a-personal-access-token-for-the-command-line). +## Checkout a repo and its private submodules +```yaml +- name: Checkout + uses: actions/checkout@v2 + with: + submodules: true + token: ${{ secrets.GH_PAT }} # `GH_PAT` is a secret that contains a PAT with read-access to the private submodules +``` ## Checkout pull request HEAD commit instead of merge commit