Best Practice for Passing Keys to js_run_binary

[jestapinski]

Hello!

Just wanted to get some guidance on this. We have a script we run via js_run_binary and want to supply some secrets to it via CI. Seems like a pattern is to use --define or --action-env and then pass via the env argument. Any other tips or recommendations to pull something in automatically that exists in the outside environment?

Thanks!