Are Slack ID considered sensitive?

[xavdid-stripe]

Description

I see that in all your examples, you store slack channel / user ids in secrets, e.g.:

channel: ${{ secrets.SLACK_CHANNEL_ID }}

Is that because channel IDs should be treated as secret values? Or just a matter of convenience.

Why I'm asking: I'd like to add a slack mention in a public-facing CI definition and was just going to hardcode my user id (U1234), but wasn't sure if I should be keeping it secret.

What type of issue is this? (place an x in one of the [ ])

• bug
• enhancement (feature request)
• question
• documentation related
• example code related
• testing related
• discussion

Requirements (place an x in each of the [ ])

• I've read and understood the Contributing guidelines and have done my best effort to follow them.
• I've read and agree to the Code of Conduct.
• I've searched for any related issues and avoided creating a duplicate issue.

[zimeg]

Hey @xavdid-stripe 👋 Thanks for asking this question!

The various IDs used in Slack API calls and responses, such as a channel ID or user ID, are unique and random but are not sensitive. Actions that use these values often require a token that is sensitive and should always be kept as a secret. The webhook URL is another value that should always be kept secret 🔍

We show these values as secrets here as a best practice and for convenience, as you noted, since swapping a secret value can be done without requiring an update to the workflow file! 📚

[xavdid-stripe]

Sounds good, thank you!