Question

You are the org owner for the 'payments' organization. A new organization-level Actions secret named STRIPE_API_KEY must be usable only by three specific repositories: 'checkout-service', 'billing-worker', and 'invoice-api'. No other current or future repositories in the org should have access to this secret. Which configuration should you apply when creating the organization secret?

Accepted Answer

Set the secret's repository access to 'Selected repositories' and add only the three named repositories

Answer

Set the secret's repository access to 'All repositories' and rely on runner group restrictions to limit which repos can decrypt it

Answer

Set the secret's repository access to 'Private repositories' so only internal repos can read it

Answer

Create the secret three separate times at the repository level in each repo, and delete the organization secret