angular-cn/aio/aio-builds-setup/docs/vm-setup--set-up-secrets.md

# VM Setup - Set up secrets


## Overview

Necessary secrets:

1. `GITHUB_TOKEN`
   - Used for:
     - Retrieving open PRs without rate-limiting.
     - Retrieving PR info, such as author, labels, changed files.
     - Retrieving members of the trusted GitHub teams.
     - Posting comments with preview links on PRs.

2. `CIRCLE_CI_TOKEN`
   - Used for:
     - Retrieving build information.
     - Downloading build artifacts.


## Create secrets

1. `GITHUB_TOKEN`
   - Visit https://github.com/settings/tokens.
   - Generate new token with the `public_repo` scope.

2. `CIRCLE_CI_TOKEN`
   - Visit https://circleci.com/gh/angular/angular/edit#api.
   - Create an API token with `Build Artifacts` scope.


## Save secrets on the VM

- `sudo mkdir /aio-secrets`
- `sudo touch /aio-secrets/GITHUB_TOKEN`
- Insert `<github-token>` into `/aio-secrets/GITHUB_TOKEN`.
- `sudo touch /aio-secrets/CIRCLE_CI_TOKEN`
- Insert `<access-token>` into `/aio-secrets/CIRCLE_CI_TOKEN`.
- `sudo chmod 400 /aio-secrets/*`