2021-12-06 UTC
# 
sknebel aaronpk: as I understand it, a Actions run gets a token with claims about the run (e.g. which repo, who triggered it, ...), which can be given to other parties (like your site in this scenario), who then can validate it and can use the claims to decide which access to give to the build run