#github-actions — Public Fediverse posts

README врёт: как я сделал open‑source линтер, который сверяет документацию с реальным репозиторием

README редко ломается в один момент. Обычно он просто постепенно перестаёт соответствовать проекту: переименовали команду, перенесли файл, удалили .env.example , сменили package manager — а инструкция осталась прежней. В итоге новый пользователь копирует команду из README и получает ошибку. Разработчик же часто узнаёт об устаревшей документации только после issue, сообщения коллеги или неудачного деплоя. Мне стало интересно: можно ли автоматически находить хотя бы часть таких расхождений, не выполняя команды из README и не отправляя исходный код в LLM? Так появился RealityLint — open‑source CLI, который статически сверяет проверяемые утверждения из README с реальным состоянием репозитория.

https://habr.com/ru/articles/1072076/

#RealityLint #README #Python #GitHubActions #CICD #opensource #статическийанализ #документация #тестирование #линтер

Your CI/CD pipeline is only as secure as the random code you copied from the Marketplace. Supply chain attacks are thriving on GitHub Actions. Here's how to lock it down. #DevSecOps #GitHubActions #Security

https://www.valtersit.com/guides/gitlab/github-actions-your-pipeline-is-only-as-secure as-the-random-code-you-copied/

via @dotnet : Test reporting in Microsoft.Testing.Platform: from red build to root cause

https://ift.tt/Pmqt8rZ
#MTP #MicrosoftTestingPlatform #TestReporting #dotnet #CI #GitHubActions #AzureDevOps #MSTest #NUnit #xUnit #TUnit #Expecto #testreports #TRX #HTMLRep…

🚨 Oh no, GitHub Actions had a nap! 💤 Apparently, coders had to endure the horror of actually thinking for themselves for a whole... few hours! 😱 But don't worry, you can now subscribe to email updates so you won't miss the thrilling moment when it goes down again! 📧🙄
https://www.githubstatus.com/uptime/br0l2tvcx85d #GitHubActions #GitHubDown #CodingStruggles #EmailUpdates #DevHumor #HackerNews #ngated

GitHub Actions suffers second-longest major outage in its history

https://www.githubstatus.com/uptime/br0l2tvcx85d

Comments: https://news.ycombinator.com/item?id=49203184

#HackerNews #GitHubActions #outage #downtime #technews #softwaredevelopment

🚨 GitHub Actions is down! #Panic ensues as #developers are forced to remember how to code without them. 📉 Meanwhile, the internet struggles to figure out how to restart a service without an OTP or CAPTCHA 🤖—truly a test of survival #skills.
https://www.githubstatus.com/incidents/qcvjkzcs7j74 #GitHubActions #Down #Coding #InternetOutage #RestartService #SurvivalSkills #HackerNews #ngated

Disrupting Supply Chain Attacks on npm and GitHub Actions, by @gregose and @steiza:

https://github.blog/security/supply-chain-security/disrupting-supply-chain-attacks-on-npm-and-github-actions/?ref=frontenddogma.com

#npm #githubactions #security #linklists

From the Leanpub Blog: The Leanpub Podcast 🎙 Feat. MaxGuernseyIII, Author of No Direction: The Severed World, Book One

https://leanpub.com/blog/the-leanpub-podcast-feat-maxguernseyiii-author-of-no-direction/

#books #leanpublishing #selfpublishing #serialfiction #fantasynovel #leanpub #githubactions #bookmarketing #writingcommunity #AIwriting #indieauthor #worldbuilding

NEW! The Leanpub Podcast 🎙 Feat. MaxGuernseyIII, Author of No Direction: The Severed World, Book One

https://youtu.be/zITuTbLWQFI

#books #leanpublishing #selfpublishing #serialfiction #fantasynovel #leanpub #githubactions #bookmarketing #writingcommunity #AIwriting #indieauthor #worldbuilding

Docker OIDC connections for GitHub Actions available for Docker Orgs
#Docker #Products #DockerHub #Githubactions #Oidcconnections #Security #Softwaresupplychainsecurity

https://www.docker.com/blog/docker-oidc-connections-for-github-actions-available-for-docker-orgs/

"if GitHub is saying anything, then _on average_, they are saying 'Actions is experiencing degraded availability'" - me just now

#github #githubactions #githubdown

🔒 Ah yes, the GitHub Blog provides a revolutionary guide to protect your open-source projects by suggesting you, um, use GitHub Actions to prevent attacks on GitHub Actions. 🚀 Because nothing says "security" like blindly trusting the very service you need protection from. 🤖
https://github.blog/security/supply-chain-security/disrupting-supply-chain-attacks-on-npm-and-github-actions/ #GitHubActions #OpenSourceSecurity #CyberSecurity #TrustIssues #TechHumor #HackerNews #ngated

Disrupting supply chain attacks on NPM and GitHub Actions

https://github.blog/security/supply-chain-security/disrupting-supply-chain-attacks-on-npm-and-github-actions/

Comments: https://news.ycombinator.com/item?id=49096427

#HackerNews #supplychain #security #NPM #GitHubActions #cybersecurity #threatprevention

More fork drama ensuing as was to be expected:

https://github.com/flathub-infra/documentation/pull/641

Also, thanks for highlighting the existence of
https://flatpark.org/

People hosting their own flatpak repos for their apps is increasing as it appears to me too.

Luckily the format, tooling and docs for this are pretty useful and enable easy publication straight from Github actions or the likes. Compared to Flathub a rather pleasant experience.

Now what'd be great would be a (forge based) discovery mechanism for self hosted flatpak repos.

#fossdrama #flatpak #flatpark #flathub #foss #opensource #llm #selfhosting #fork #github #githubactions

#GitHubActions appears to silently truncate concurrency.group values. Naturally, this is also completely undocumented as far as I can tell.

Signed, someone who spent quite a while trying to identify why some matrix cells were getting cancelled for "no reason" 🤬

(Side whine: one reason those values were so long is the original version of the workflow was probably vibe coded...)

GitHub Actions became an attacker’s disposable scanner fleet. https://www.developer-tech.com/news/github-actions-abuse-packagist-repositories-into-scanners/ #devsecops #githubactions #packagist #cybersecurity #developers #infosec #technology

CI/CD pipelines are a prime target for supply chain attacks. We hardened the GitHub Actions workflows for Composer, Packagist and Private Packagist with zizmor, a static analysis tool for GitHub Actions. 🌈

Our new blog post covers what zizmor catches, our configuration, and the pitfalls we hit along the way:
https://blog.packagist.com/securing-our-github-actions-workflows-with-zizmor/

#php #phpc #composerphp #github #githubactions #supplychainsecurity

Your GitHub Actions runner VM is building from last week's dirty state. One compromised dependency later, your private cloud is owned. Here's how ephemeral Kubernetes runners fix the isolation gap without killing build speed. #DevSecOps #GitHubActions #Kubernetes

https://www.valtersit.com/guides/gitlab/self-hosted_ci_runners-security_vs_performance_in_the_private_cloud/

🏃 jonico/awesome-runners

A curated list of awesome self-hosted GitHub Action runners in a large comparison matrix

Compares self-hosted GitHub Action runner solutions in a detailed matrix with features like scaling, architecture, and costs

⭐ Stars: 882
📅 Last Update: Jul 10, 2026

https://github.com/jonico/awesome-runners

#selfhosted #homelab #selfhost #selfhosting #opensource #githubactions

That GitHub Action you copied from the Marketplace? It just shipped a crypto miner to production. Your supply chain is only as secure as the random code you didn't read. Here's how to fix it. #GitHubActions #DevSecOps #Security

https://www.valtersit.com/guides/gitlab/github-actions-your-pipeline-is-only-as-secure as-the-random-code-you-copied/

https://winbuzzer.com/2026/07/09/gitlost-prompt-injection-can-leak-github-private-repos-xcxwbn/

A look at GitLost, the GitHub Agentic Workflows prompt-injection case where public issue text, private repo access, and public comments collide.

#AI #GitLost #GitHub #GitHubActions #PromptInjection #AIAgents #AgenticAI #AISecurity #GitHubCopilot #Cybersecurity