repository-dispatch | A GitHub action to create a repository dispatch event | Continous Integration library

I want to create a simple Github Action that logs a timestamp to a log file, to something like /logs/publish.log

I need the github action to trigger from a webhook.

My github action would upon receiving a webhook request.

1. Append the date/time to the end of /logs/publish.log
2. Do an automatic commit eg "Newly published content"

How would I configure a github action to achieve this?

Here's where I'm at as a start:

File: .github/workflows/log-commit-on-repository-dispatch.yml

Is there a way to pass data securely from between repos using the client_payload in a repository dispatch event?

I create a repository dispatch event for a CI pipeline I have between my two of my repos. My first repo uses Terraform in a GitHub Action to create Azure cloud resources and then is suppose to take the outputs for the sever address, username, and password of my container registry resource created using my azure.tf script.

In the final step of my GitHub Action in the first repo, it makes a POST request curl to notify my second repo that the initial cloud resources for the Azure Container Registry (ACR) have been created. It should now be safe to build my container images from my second repo and push them to ACR.

My problem is with the client_payload being sent over to my second repo, it is using unsecure raw json that will expose the password most importantly and other information in the output string of my running CI jobs under the GitHub action in my second repo.

This is why I'd like to understand if there's a way to pass data securely from between repos using the client_payload?