GitHub Actions

Fetch a Runny script from a workflow with curl. There is no GitHub App. Store fetch tokens as secrets.

Workflow

There is no GitHub App and no marketplace action. A job is a client that fetches bytes.

YAML

name: run hosted script
on: workflow_dispatch
jobs:
  run:
    runs-on: ubuntu-latest
    steps:
      - name: Fetch and run
        env:
          RUNNY_TOKEN: ${{ secrets.RUNNY_TOKEN }}
        run: curl -fsSL -H "Authorization: Bearer $RUNNY_TOKEN" https://runny.sh/r/{slug} | bash

Public scripts can omit the header. Store private fetch tokens as Actions secrets, never in the workflow file.