#github-actions (2022-08)
Discussions related to GitHub Actions
2022-08-03
This is interesting: Tinder Security posted an article about how they look for potential security vulnerabilities in GitHub Actions workflows and they released the tool they built
Authored by: Rojan Rijal, Tinder Security Labs | Johnny Nipper, Product Security Manager | Tanner Emek, Engineering Manager |
Script to audit GitHub Action Workflow files for potential vulnerabilities.
It’s small right now, but it’s definitely interesting!
GitHub Actions: Remove offline self-hosted runners GitHub Actions: Remove offline self-hosted runners
GitHub Actions: Remove offline self-hosted runners
2022-08-08
GitHub Actions: runner images repository refresh GitHub Actions: runner images repository refresh
GitHub Actions: runner images repository refresh
2022-08-09
Anybody knows how to get workflow_dispatch inputs for a run via the GH api?
Like a workflow is triggered somewhere via the api with inputs/parameters, and now I want to get the currently running workflows and the inputs.
GitHub Actions: Self-hosted runners now support Apple M1 hardware GitHub Actions: Self-hosted runners now support Apple M1 hardware
GitHub Actions: Self-hosted runners now support Apple M1 hardware
GitHub Actions: The Ubuntu 18.04 Actions runner image is being deprecated and will be removed by 12/1/22 GitHub Actions: The Ubuntu 18.04 Actions runner image is being deprecated and will be removed by 12/1/22
GitHub Actions: The Ubuntu 18.04 Actions runner image is being deprecated and will be removed by 12/1/22
GitHub Actions: Ubuntu 22.04 is now generally available on GitHub-hosted runners GitHub Actions: Ubuntu 22.04 is now generally available on GitHub-hosted runners
GitHub Actions: Ubuntu 22.04 is now generally available on GitHub-hosted runners
2022-08-10
GitHub Pages: Builds with GitHub Actions GA GitHub Pages: Builds with GitHub Actions GA
GitHub Pages: Builds with GitHub Actions GA
2022-08-17
https://twitter.com/sheldon_hull/status/1559605904743583744 Anyone know an answer to this? I’m just jumping back in actions, and the lack of being able to setup a object at the top feels odd.
basically in azure pipelines
parameters:
- name: builds
type: object
default:
- version1
- version2
- version3
then you could use it later in templating approach with things like this. It provided an object/list. Only example I’ve found involves arg splitting via cli, which feels pretty hacky.
Note: This is NOT a matrix build, which I know is supported. Instead it’s an object list not a string list that can be used to iterate or loop through.
- template: templates/install-version.yml@templates
parameters:
builds: ${{ parameters.builds }}
Is this where the power of Azure pipelines just shows it’s robustness over the github actions features that don’t have such rich templating features?
For those using both Azure Pipelines, and GitHub actions… is there a way to have a parameter “object” (ie a yaml list) that can be used later in the github action, not a string, but a yaml object to simplify reuse. I don’t want to do cli arg splitting a string to accomplish it
Have been after a feature like this as well, but can’t see how to do it without storing multiple variables inside a single env variable.
For those using both Azure Pipelines, and GitHub actions… is there a way to have a parameter “object” (ie a yaml list) that can be used later in the github action, not a string, but a yaml object to simplify reuse. I don’t want to do cli arg splitting a string to accomplish it
This is probably the first time that I’ve hit something that I’m like azure pipelines NAILS that isn’t elegant in another place.
Not as portable as simple yaml pipelines but incredibly flexible for templating and beyond what a matrix build can do
2022-08-18
Merge group webhook event and GitHub Actions workflow trigger Merge group webhook event and GitHub Actions workflow trigger
Merge group webhook event and GitHub Actions workflow trigger
2022-08-22
GitHub Actions: Improvements to reusable workflows GitHub Actions: Improvements to reusable workflows
GitHub Actions: Improvements to reusable workflows
GitHub Actions: Improvements to reusable workflows GitHub Actions: Improvements to reusable workflows
GitHub Actions: Improvements to reusable workflows
2022-08-23
GitHub Actions: Enhancements to OpenID Connect support to enable secure cloud deployments at scale GitHub Actions: Enhancements to OpenID Connect support to enable secure cloud deployments at scale
GitHub Actions: Enhancements to OpenID Connect support to enable secure cloud deployments at scale
2022-08-26
Blowing steam here about some stuff that people do in CI/CD! Can’t hold it anymore! Here is one of mine: npm install instead of npm ci
Join me and blow your steam too
Good pro tip! I had to look it up to be honest, but will make this recommendation. https://betterprogramming.pub/npm-ci-vs-npm-install-which-should-you-use-in-your-node-js-projects-51e07cb71e26
And what exactly is the difference?
Thanks! What is your pro tip for CI/CD?
Tiny teams using release branches. Broseph(ette), semantic release is all you need.
GitHub Action for Semantic Release