Agent-readable docs index: /llms.txt. Full docs in one file: /llms-full.txt. Download /docs.zip to grep all markdown files locally.

GitHub Actions

Create a Mellon token for one project, environment, and surface. Use a short expiration such as 30 days. Store the token as the MELLON_TOKEN GitHub Actions secret.
name: Build

on:
  push:

permissions:
  contents: read

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: oven-sh/setup-bun@v2
      - run: bun install --frozen-lockfile
      - name: Build with Mellon
        env:
          MELLON_TOKEN: ${{ secrets.MELLON_TOKEN }}
          MELLON_API_URL: https://<your-mellon-host>
        run: >-
          bunx @jsj/mellon run
          --project <project>
          --env <environment>
          --surface <surface>
          -- bun run build
mellon run filters secret values from standard output and standard error. The workflow token cannot read another project, environment, or surface when all three scopes are selected.
Rotate the GitHub secret before the token expires. Delete the old token from the Mellon token page after a successful workflow run.
Mellon does not support GitHub OIDC authentication yet. Use the scoped, expiring token until OIDC support is available.
Mellon
Powered byHolocron