Allow some foreign PRs to use secret variables (e.g. for select authors, or on demand)

[native-api]

The following Feature Request would allow to provide PRs with credentials if an upstream developer made the last commit in the PR branch.
In this light, you would be able to “approve” a PR and allow it to run with the full set of checks by an upstream developer pushing a dummy commit to the PR branch.

Allow external pull requests to use secret variables from the forked repo

(I’ve merged this FR with a duplicate one with a better title) As per above, IMO the fork author does trust the upstream code with their credentials – since they are the last person making changes to the codebase. The sharing can also be made explicit so that the PR author knows of this fact This also raises the question of what to do if someone else makes a contribution to the PR branch. I’d say the secrets should only be shared if the last commit is by the PR’s author (if author and commit…