#githubaction — Public Fediverse posts

Kätevä tuo dockerin julkaisema builder workflow (https://docs.docker.com/build/ci/github-actions/github-builder/).

Piti vaan hetki raapia päätä miksi tuli ghcr-registryyn hassuja sha-tägejä. Näköjään joku muukin oli sitä jo ihmetellyt ja signaturen poislaitto auttoi (https://github.com/docker/github-builder/issues/109).

#githubAction #docker #tuuskaus

Kätevä tuo dockerin julkaisema builder workflow (https://docs.docker.com/build/ci/github-actions/github-builder/).

Piti vaan hetki raapia päätä miksi tuli ghcr-registryyn hassuja sha-tägejä. Näköjään joku muukin oli sitä jo ihmetellyt ja signaturen poislaitto auttoi (https://github.com/docker/github-builder/issues/109).

#githubAction #docker #tuuskaus

Flaw in Claude Code GitHub Action Exposes Repositories to Hijacking

A security researcher discovered a logic hole in Anthropic's Claude Code GitHub Action that could let attackers hijack vulnerable public repositories with just a single opened GitHub issue. This flaw exploited broad read and write permissions, putting countless repositories at risk.

https://osintsights.com/flaw-in-claude-code-github-action-exposes-repositories-to-hijacking?utm_source=mastodon&utm_medium=social

#Github #ClaudeCode #GithubAction #RepositoryHijacking #EmergingThreats

GitHub Actions token format `ghs_APPID_JWT` (~520 chars, variable length).

Regex

NEW: `ghs_[0-9]+_[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+`

https://github.blog/changelog/2026-04-24-notice-about-upcoming-new-format-for-github-app-installation-tokens/#how-to-prepare-for-this-change

OLD: `ghs_[A-Za-z0-9]{36}`

https://github.blog/changelog/2021-03-04-authentication-token-format-updates/

#GitHub #GitHubAction #GitHubServerToken #GitHubToken #Regex

Pavel just released new version of vcs-diff-lint 🛠️ The tool (+ GitHub action) for differential code linting.

The highlight: Newly with yamllint support!

Bonus: Fedora's Forgejo instance integration experiment (infra ansible repo):
https://forge.fedoraproject.org/infra/ansible/pulls/3304

#Ansible #YAML #Linter #CI #GitHubAction #FedoraInfra

Pavel just released new version of vcs-diff-lint 🛠️ The tool (+ GitHub action) for differential code linting.

The highlight: Newly with yamllint support!

Bonus: Fedora's Forgejo instance integration experiment (infra ansible repo):
https://forge.fedoraproject.org/infra/ansible/pulls/3304

#Ansible #YAML #Linter #CI #GitHubAction #FedoraInfra

My head of ops complained that #GitHub CI/CD has become _so_ unreliable, specifically #GitHubAction s and its scheduler (even with #selfhosted runners) that we need to migrate to an alternative.

We're not alone, see e.g. #Zig https://ziglang.org/news/migrating-from-github-to-codeberg/

The graph shows the dramatic decrease in availability after the #Microsoft #acquisition ...

My head of ops complained that #GitHub CI/CD has become _so_ unreliable, specifically #GitHubAction s and its scheduler (even with #selfhosted runners) that we need to migrate to an alternative.

We're not alone, see e.g. #Zig https://ziglang.org/news/migrating-from-github-to-codeberg/

The graph shows the dramatic decrease in availability after the #Microsoft #acquisition ...

Blogged : update semantic version using #bash script

https://blog.revathskumar.com/2026/02/update-semantic-version-using-bash-script.html

#zig #GithubAction #semver

Blogged : update semantic version using #bash script

https://blog.revathskumar.com/2026/02/update-semantic-version-using-bash-script.html

#zig #GithubAction #semver

Having seen the post about GitHub Actions being crap (and mainly agreeing with it) I would like to move the conversation to the combination of GH Actions and dependabot carrying out a near continuous DoS attack on my inbox

#GitHubAction #GitHub #Email

Having seen the post about GitHub Actions being crap (and mainly agreeing with it) I would like to move the conversation to the combination of GH Actions and dependabot carrying out a near continuous DoS attack on my inbox

#GitHubAction #GitHub #Email

https://www.githubstatus.com/

GitHub Actions have issues with updating UI😭
Wasted 1 hour trying to modify yml syntax etc.😭

Should have checked this first. 🥹
1 hour of frustration is unnecessary 😩

#github #GitHubActions #GithubAction #git #CI #GitHubStatus

Sometimes you have an idea, try to bring it to life and it actually works.
I just built a GitHub Actions Workflow which builds a static version of a fdroid repo and does a deployment to GitHub pages. https://github.com/jkoan/fdroid-repo
#fdroid #repo #GithubAction

I used this article as an entry point to understand what is @vitest browser mode and how it’s different from other types of tests: https://www.epicweb.dev/vitest-browser-mode-vs-playwright

And then I created a small setup for DOM-related tests on a in-progress #JavaScript library (no front-end framework, #ESLint, #Playwright via Vitest browser mode, runs locally and in a #GitHubAction). PR for the curious: https://github.com/frontacles/frontacles/pull/78

I used this article as an entry point to understand what is @vitest browser mode and how it’s different from other types of tests: https://www.epicweb.dev/vitest-browser-mode-vs-playwright

And then I created a small setup for DOM-related tests on a in-progress #JavaScript library (no front-end framework, #ESLint, #Playwright via Vitest browser mode, runs locally and in a #GitHubAction). PR for the curious: https://github.com/frontacles/frontacles/pull/78

Probably the greatest timing function in history.

https://www.youtube.com/watch?v=E3_95BZYIVs

#programming #github #GithubAction

Probably the greatest timing function in history.

https://www.youtube.com/watch?v=E3_95BZYIVs

#programming #github #GithubAction

So apparently the Github action "actions/checkout" disregards the path of the server instance URL completely. I was trying to set up Forgejo Actions, but my forge is located under something like foo.example.com/git, which makes using this predefined action impossible.

I either have to relocate my Git forge to be available under something like git.example.com or clone the repository manually in my workflow. Fun fun fun.

#forgejo #githubAction #ci

So apparently the Github action "actions/checkout" disregards the path of the server instance URL completely. I was trying to set up Forgejo Actions, but my forge is located under something like foo.example.com/git, which makes using this predefined action impossible.

I either have to relocate my Git forge to be available under something like git.example.com or clone the repository manually in my workflow. Fun fun fun.

#forgejo #githubAction #ci

Has GitHub moved to smaller Azure boxes for GH Actions (or just more contention).

I have tests which normally take 18min being killed at 45mins with no reason for them to take longer other than slower machines.

#GitHub #GitHubAction

Has GitHub moved to smaller Azure boxes for GH Actions (or just more contention).

I have tests which normally take 18min being killed at 45mins with no reason for them to take longer other than slower machines.

#GitHub #GitHubAction

Quite happy with my release process for sofmani

-> Push updates to git
-> Release Please generates changelog PR
-> When merged, release is created
-> All files are generated & uploaded to release
-> Triggers a dispatch workflow to my OTHER repo, which is the homebrew tap
-> That generates a PR for homebrew update & bottles
-> Add label pr-pull and it updates the tap with the bottles

With tests on every step

#GitHub #GitHubAction #homebrew

Quite happy with my release process for sofmani

-> Push updates to git
-> Release Please generates changelog PR
-> When merged, release is created
-> All files are generated & uploaded to release
-> Triggers a dispatch workflow to my OTHER repo, which is the homebrew tap
-> That generates a PR for homebrew update & bottles
-> Add label pr-pull and it updates the tap with the bottles

With tests on every step

#GitHub #GitHubAction #homebrew

Wrote a minimalistic github action to create pull requests in my local #gitea instance within the workflow. Currently only supports way to less configuration flags but it's working in its minimal form. Available here: https://github.com/deB4SH/tea-pr

tags for visibility: #homelab #gitea #github #githubaction #act

Wrote a minimalistic github action to create pull requests in my local #gitea instance within the workflow. Currently only supports way to less configuration flags but it's working in its minimal form. Available here: https://github.com/deB4SH/tea-pr

tags for visibility: #homelab #gitea #github #githubaction #act

Did you see that #Antropic released an official GitHub Action to use in a PR? I did! So much fun if you keep track of these marketplaces 🎉.

GitHub Actions Marketplace News https://devops-actions.github.io/github-actions-marketplace-news/blog/2025/05/23/claude-code-action-official/

You can also build something similar using GitHub Models of course!

#GitHubAction #GitHub

Did you see that #Antropic released an official GitHub Action to use in a PR? I did! So much fun if you keep track of these marketplaces 🎉.

GitHub Actions Marketplace News https://devops-actions.github.io/github-actions-marketplace-news/blog/2025/05/23/claude-code-action-official/

You can also build something similar using GitHub Models of course!

#GitHubAction #GitHub

🙀 Oh, this is an unexpected limitation of GitHub Actions:

When pushing more than 3 tags at once, GitHub Actions does not trigger any workflows.

#github #githubaction

🙀 Oh, this is an unexpected limitation of GitHub Actions:

When pushing more than 3 tags at once, GitHub Actions does not trigger any workflows.

#github #githubaction

@GossiTheDog Exactly how I feel after trying to get a #microsoft #visualstudio VSTO project to build in a #GithubAction. If I banged my head against the wall I'd at least WHY it hurts. But hey, it's Friday, at least we get two days of not think about it. Whish you a good weekend and all the success on Monday

The first #GithubAction to check #Bibtex consistency. For instance: Do all articles have page numbers, no articles, or is there a mix?

Head on to https://github.com/JabRef/jabref-action to see an example.

This is an alpha state. Feedback and contributions very welcome!

#TeXLaTeX #Quality

The first #GithubAction to check #Bibtex consistency. For instance: Do all articles have page numbers, no articles, or is there a mix?

Head on to https://github.com/JabRef/jabref-action to see an example.

This is an alpha state. Feedback and contributions very welcome!

#TeXLaTeX #Quality

Ah, the fun of hosting your own #GitHubAction runners for your projects <3.

Ah, the fun of hosting your own #GitHubAction runners for your projects <3.

Announcing my TestInfra GitHub Action: https://blog.wyrihaximus.net/2025/03/announcing-testinfra-action/

#python #testInfra #GitHub #GitHubAction #OCI #Docker

Announcing my TestInfra GitHub Action: https://blog.wyrihaximus.net/2025/03/announcing-testinfra-action/

#python #testInfra #GitHub #GitHubAction #OCI #Docker

CISA Warns of Exploited GitHub Action CVE-2025-30066 – Users Urged to Patch https://thecyberexpress.com/exploited-github-action-cve-2025-30066/ #GitHubPersonalAccessTokens #tjactions/changedfiles #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE202530066 #GitHubAction #CyberNews #CISA

CISA Warns of Exploited GitHub Action CVE-2025-30066 – Users Urged to Patch https://thecyberexpress.com/exploited-github-action-cve-2025-30066/ #GitHubPersonalAccessTokens #tjactions/changedfiles #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE202530066 #GitHubAction #CyberNews #CISA

So this weekend's tj-actions/changed-files credentials stealing fun and games.

I know you can fake git commit time stamps, but it looks like the change was made just before 17:00 GMT on Friday night. I wonder if that was deliberate to try adnd catch people pushing updates on their way out the door and not expecting to check the logs before Monday morning.

#GitHub #GitHubAction #Security

So this weekend's tj-actions/changed-files credentials stealing fun and games.

I know you can fake git commit time stamps, but it looks like the change was made just before 17:00 GMT on Friday night. I wonder if that was deliberate to try adnd catch people pushing updates on their way out the door and not expecting to check the logs before Monday morning.

#GitHub #GitHubAction #Security

⚠️ Tj-actions/changed-files GitHub Action Compromised

https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised

#github #githubaction

⚠️ Tj-actions/changed-files GitHub Action Compromised

https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised

#github #githubaction

Popular GitHub Action tj-actions/changed-files is compromised

https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/

#HackerNews #GitHubAction #Security #Compromise #tj-actions #changed-files #Cybersecurity

Popular GitHub Action tj-actions/changed-files is compromised

https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/

#HackerNews #GitHubAction #Security #Compromise #tj-actions #changed-files #Cybersecurity

Machinefile executor

A simple executor that allows you to run `Dockerfile`/`Containerfile` commands directly on the host

- Machinefile executor
https://github.com/gbraad-redhat/machinefile
- GitHub Action
https://github.com/gbraad-actions/machinefile-executor-action

- Examples
https://github.com/gbraad-redhat/machinefile/issues/3

#docker #podman #githubaction #containers #linux

Machinefile executor

A simple executor that allows you to run `Dockerfile`/`Containerfile` commands directly on the host

- Machinefile executor
https://github.com/gbraad-redhat/machinefile
- GitHub Action
https://github.com/gbraad-actions/machinefile-executor-action

- Examples
https://github.com/gbraad-redhat/machinefile/issues/3

#docker #podman #githubaction #containers #linux

I have been exclusively using #GitLabCICD almost forever until recently (since ~2016). in the past year I got a chance to use #GitHubAction and I have to say GitLab is way superior here! happy I missed nothing

Nice to see the OpenSauced pizza-action in action updating the CODEOWNERS file in one of our repositories. The way we're generating it, it's more granular which helps to laser focus on who gets automatically tagged for reviews in PRs.🍕 https://github.com/open-sauced/pizza-cli/pull/166 #github #githubaction #opensource

Anyone with knowledge of GitHub Actions’ bash version and/or sed able to shed light on why this workflow failed?

When I run the same command locally on my bash it works, but on GitHub it fails.

https://github.com/nanos/FediFetcher/actions/runs/10678378044/job/29595310012

#bash #sed #github #GithubAction #GithubActions #Github_Action #Github_Actions

I don't think the #GitHubAction style of #CICD is very good and I think #Forgejo et al are making a mistake copying it.