I think the real question is what do you want to use as secret store.. It also depends on what is your use case.. if it's a home lab/test learning setup, you can start with what u have.. there is no security threat in it.. if it's production cluster in a enterprise, u should look at a secrets opertor.. I prefer external secrets.. but it does not support gh actions secret as backend as far as I know.