#github-actions (2023-06)
Discussions related to GitHub Actions
2023-06-01
2023-06-02
GitHub Actions – Just-in-time self-hosted runners GitHub Actions - Just-in-time self-hosted runners
2023-06-13
GitHub Actions: You can now disable repo level self-hosted runners in an Enterprise and Organization GitHub Actions: You can now disable repo level self-hosted runners in an Enterprise and Organization
GitHub Actions: All Actions will run on Node16 instead of Node12 by default GitHub Actions: All Actions will run on Node16 instead of Node12 by default
Fix to improve security around creation of pull requests in public repos Fix to improve security around creation of pull requests in public repos
2023-06-15
GitHub Actions – Securing OpenID Connect (OIDC) token permissions in reusable workflows For securely enabling OpenID Connect (OIDC) in your reusable workflows, we are now making the permissions more restrictive. If you need to fetch an OIDC token generated within a reusable (called) workflow that is outside your enterprise/organization, then the permissions setting for id-token should now be explicitly set to write at the caller workflow level […]
2023-06-19
Speaking of GHA and OIDC, does anyone know how can I filter CloudTrail for events coming from OIDC?
@Dan Miller (Cloud Posse)
The easiest way seems to be to filter for the role that is assumed
Audit the role’s use with Amazon CloudTrail logs.
@Dan Miller (Cloud Posse) thanks, I can’t see a way to filter by role at least in the simple “event history”. I guess I have to export events somewhere else to filter by role
2023-06-21
GitHub-hosted larger runners for Actions are generally available GitHub-hosted larger runners for Actions are generally available
2023-06-22
Hi, does anyone know any way to detect stale / hung job and kill it? Something that implements idle timeout as opposed to regular “dumb” timeout
for the record, I created a wrapper action that does that if anyone needs one
2023-06-27
GitHub Actions – Update on OIDC integration with AWS We have received customers reporting errors with Actions’ OIDC integration with AWS. This happens for customers who are pinned to a single intermediary thumbprint from the Certificate Authority (CA) of the Actions SSL certificate. There are two possible intermediary certificates for the Actions SSL certificate and either can be returned by our servers, requiring customers […]
I have both thumbnails configured yet it’s failing. Anyone knows other possible reasons?
for anyone looking. they forgot to list one thumbprint, at least in the version I was looking at here is a oneliner that finds the one you need to add https://github.com/aws-actions/configure-aws-credentials/issues/357#issuecomment-1183591299 which together with the 2 they listed gives
6938fd4d98bab03faadb97b34396831e3780aea1
f879abce0008e4eb126e0097e46620f5aaae26ad
1c58a3a8518e8759bf075b76b750d4f2df264fcd
2023-06-28
2023-06-30
GitHub Actions – Actions Runner General availability GitHub Actions - Actions Runner General availability