#GithubActions

@alaxhenry0121.bsky.social

3 hours ago

Anyone Can Build a Flutter App. Not Everyone Can Ship It Without Touching a Button. A senior Flutter engineer doesn’t just write code — they own the pipeline that takes code from a Git push to a live App Store release…

I just published Anyone Can Build a Flutter App.
Not Everyone Can Ship It Without Touching a Button. medium.com/p/anyone-can...
#Flutter #FlutterDev #CICD #Fastlane #GitHubActions #FlutterFlavors #CodeSigning #DartDefine #FirebaseAppDistribution #TestFlight #PlayStore #FlutterInterview

0 0 0 0

Mark Jack

@markjackmilian.bsky.social

1 day ago

Just a moment...

Modernize your .NET app deployment with trusted NuGet publishing using GitHub Actions! Learn to automate, secure, and streamline your workflows. Boost efficiency and reliability.#DotNet #GitHubActions

0 0 0 0

Frontend Dogma

@frontenddogma.com

2 days ago

How To Publish To NPM From GitHub Actions At the end of 2025, NPM registry revoked all personal NPM tokens that I used to publish new NPM package releases. This change improves the security of the entire NPM publishing workflow, but has disru

How to Publish to npm From GitHub Actions, by @bahmutov@fosstodon.org:

https://glebbahmutov.com/blog/npm-publish-from-github/

#howtos #npm #githubactions

0 0 0 0

SCANOSS

@scanoss.bsky.social

2 days ago

Running SCANOSS in GitHub Actions: Automate Open Source Scanning in CI YouTube video by SCANOSS

New demo 🎥

Automate open source scanning in GitHub by running SCANOSS in a GitHub Actions workflow.

Set up the workflow, configure parameters, trigger scans, and review detection results — all inside your CI pipeline.

Watch → youtu.be/7qfOoXGj0aA

#SCANOSS #GitHubActions #DevSecOps

0 0 0 0

Gradle Technologies

@gradle.com

3 days ago

Lessons learned modernizing Apache Kafka CI builds with Develocity and GitHub Actions | Gradle Technologies Get the lessons-learned from the migration from Apache Kafka's migration from Jenkins to GitHub Actions, including how Develocity helped quantify performance gains and prove ROI.

In 1 hour! ⏰

Hear how Apache #Kafka went from 8 to 2 hour builds by migrating from #Jenkins to #GitHubActions with #Develocity.

Save your seat 👇
gradle.com/events/modernizing-apach...

#CI #modernization

0 0 0 0

devopstales

@devopstales.bsky.social

4 days ago

GitHub Actions: Basics Learn GitHub Actions fundamentals - workflows, jobs, actions, and artifact sharing with modern best practices.

⚡ NEW: GitHub Actions Basics for DevOps!

CI/CD pipelines, workflows, secrets & self-hosted runners. Automate your deployments with GitHub's native CI/CD.

📖 Read: devopstales.github.io/devops/githu...

#GitHubActions #CICD #DevOps #Automation

0 0 0 0

さるぼっと@IT最新動向を配信

@sarubot.bsky.social

4 days ago

【2026年の大改定】GitHub Actions君、値下げとセルフホスト有料 ... このように、同じ4コアのマシンを使っても、スイッチを「ARM」に切り替えるだけでコストが 1/3 カットされます。さらに衝撃的なのが Windows 環境です。 | OS / アーキテクチャ | 改定後の料金 (1分あたり) | x64との価格差 | --- | Windows x64 (4-core) | $0.022 | Windows ARM (4-core) | $0.014 | 36% 安い | Windows環境においても、ARM版を選ぶだけで約4割近いコスト削減になります。 ### なぜこれが「誘導」なのか？クラウドプロバイダー（AzureやAWS）にとっ

GitHub ActionsのランナーをARMへ切り替えるだけでコストが最大1/3に。単なる値下げを超え、x64からの強制移行を促す強烈な方針転換です。セルフホスト維持費がクラウド代を上回る今、ワークフローのアーキテクチャを即座に見直すべきです。

#GitHubActions #CI/CD

0 0 0 0

Steef-Jan Wiggers

@steefjan.bsky.social

4 days ago

AI-Powered Bot Compromises GitHub Actions Workflows Across Microsoft, DataDog, and CNCF Projects AI-powered bot hackerbot-claw exploited GitHub Actions workflows across Microsoft, DataDog, and CNCF projects over 7 days using 5 attack techniques. Bot achieved RCE in 5 of 7 targets, stole GitHub to...

An AI-powered bot systematically exploited GitHub Actions across Microsoft, DataDog, and CNCF repos; 5 out of 7 targets compromised. Turns out CI/CD pipelines have their own version of injection attacks, and most teams aren't ready for them. #githubactions #aisecurity www.infoq.com/news/2026/03...

3 2 0 0

Cybersecurity News Everyday

@hendryadrian.bsky.social

4 days ago

Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets Researchers uncovered five malicious Rust crates on crates.io that masqueraded as time-related utilities and exfiltrated .env file data to threat actor-controlled infrastructure. The campaign (notably chrono_anchor) impersonated timeapi.io via timeapis[.]io, and a related AI-powered attack using hackerbot-claw exploited GitHub Actions to compromise Aqua Security’s Trivy extension (CVE-2026-28353), leading to removals and...

Five malicious Rust crates disguised as time utilities stole .env data by mimicking timeapi.io. An AI bot exploited GitHub Actions to hijack Aqua Security’s Trivy (CVE-2026-28353), prompting removals and audits. #RustSecurity #GitHubActions #USA

0 0 0 0

Ubuntu

@ubuntu.activitypub.awakari.com.ap.brid.gy

5 days ago

CI/CD Pipeline Design with Claude Code: GitHub Actions from Zero to Deploy GitHub Actions workflows have a steep learning curve — YAML syntax, job dependencies, secret...

CI/CD Pipeline Design with Claude Code: GitHub Actions from Zero to Deploy GitHub Actions workflows have a steep learning curve — YAML syntax, job dependencies, secret management, Blue-Green depl...

#claudecode #githubactions #cicd #devops

Origin | Interest | Match

0 0 0 0

roxsross

@roxsross.bsky.social

6 days ago

🔒 Bajo el capó: Arquitectura de seguridad de GitHub Agentic Workflows

Descubre cómo el aislamiento y el registro mantienen seg

github.blog/ai-and-ml/generative-ai/...

#GitHubActions #SecurityArchitecture #AgenticAI #RoxsRoss

0 0 0 0

Aptivi

@aptivi.bsky.social

6 days ago

Research: GitHub Actions, security practices, and mixed methods GitHub Actions is a CI/CD environment that allows you to automate building, testing, and deploying your project to save development time while maximizing productivity and increasing flexibility. GitHub Actions is free and unlimited for public repositories, which supports the need of continuous integration in open source projects. Recently, a research, which is conducted by the researchers: Yusuke Kubo (Waseda University and NTT DOCOMO BUSINESS Inc.), Fumihiro Kanei (NTT DOCOMO BUSINESS Inc.), Mitsuaki Akiyama (NTT, Inc.), Takuro Wakai (Waseda University), and Tatsuya Mori (Waseda University, NICT, and RIKEN AIP), is studying how developers across GitHub is using GitHub Actions in public repositories.

We have summarized the research for GitHub Actions and security practices, which was accepted for NDSS Symposium 2026.

#GitHub #GitHubActions #NDSS2026 #TechNews #TechUpdates

0 0 0 0

Aptivi

@aptivi.bsky.social

1 week ago

Switching GitHub Pages deployment from Classic to Actions-based deployment GitHub has introduced another method to deploy your GitHub Pages website from the classic method to the modern deployment method from your GitHub Actions workflow. This avoids having to select a dedicated branch (usually called gh-pages) from your repository, which is separate from all your branches, including the main one. This removes a huge overhead in having to maintain a separate branch dedicated for GitHub Pages files, which are static files that contain HTML, CSS, JS, and other website-related files.

Switching GitHub Pages deployment method from classic to modern method demonstrated with Textify.

#GitHub #GitHubPages #GitHubActions #TechNews #TechUpdates #website

0 0 0 0

Next SNS ラボ編集者

@nextsns-news.com

1 week ago

【ソースコード公開】ブログ自動投稿システムを作って失敗した話。供養のためにPythonコードとYMLファイルを全部載せました。
https://nextsns-news.com/github-actions-openai/
#GitHubActions #OpenAI

0 0 0 0

Tomasz Cielecki

@ostebaronen.dk

1 week ago

Authenticating git and gh-cli using GitHub Apps in GitHub Actions In a previous post I wrote a bit about how I authenticated the Renovate Bot using a GitHub App, to allow it to gain access to private packages in GitHub Packages. This approach is also useful in gener...

Blogged a bit about using #GitHub Apps for authentication in #GitHubActions workflows: blog.ostebaronen.dk/2026/03/auth...

I recently had to do this to have a scheduled action be able to create pull requests on a repo, but also have checks running on said PR. You can't do that with a regular token.

0 0 0 1

Ubuntu

@ubuntu.activitypub.awakari.com.ap.brid.gy

1 week ago

Introducing 'Publish to Dev.to Organization' Action: How to Safely Test Your Workflow I built a new GitHub Action for Dev.to! Here is a complete guide to safely testing 8 different publishing patterns using its built-in dry-run feature.

Introducing 'Publish to Dev.to Organization' Action: How to Safely Test Your Workflow I recently joined Dev.to and wanted to automate my article publishing directly from GitHub. However, I ...

#githubactions #testing #tutorial #devto

Origin | Interest | Match

0 0 0 0

Status Is Down

@statusisdown.bsky.social

1 week ago

Is GitHub down? [March 5, 2026] GitHub Actions is reportedly down for some users on March 5, 2026. According to the graph showing on the outage tracking service DownDetector, the volume of user reports started rising around 11:21AM ...

GitHub Actions is reportedly down for some users right now. Are you one of them? #GitHub #GithubActions #GitHubDown

0 0 0 0

Gradle Technologies

@gradle.com

1 week ago

Lessons learned modernizing Apache Kafka CI builds with Develocity and GitHub Actions | Gradle Get the lessons-learned from the migration from Apache Kafka's migration from Jenkins to GitHub Actions, including how Develocity helped quantify performance gains and prove ROI.

From #Jenkins to #GitHub Actions: How Apache #Kafka modernized its CI. 🚀

Join the webinar on March 12:

gradle.com/events/modernizing-apach... 🔗

#CI #ApacheKafka #GitHubActions #DevOps

1 0 0 0

Next SNS ラボ編集者

@nextsns-news.com

1 week ago

【ソースコード公開】ブログ自動投稿システムを作って失敗した話。供養のためにPythonコードとYMLファイルを全部載せました。
https://nextsns-news.com/github-actions-openai/
#GitHubActions #OpenAI

0 0 0 0

Gradle Technologies

@gradle.com

1 week ago

Avoiding the Next Supply Chain Disaster with GitHub and Gradle Supply chain security is a big deal, and it’s dangerously easy to ignore. For Android or JVM developers, the sheer scale of the ecosystem is our greatest strength, and our greatest risk.

Solve the "Transitive Trap" 🪤

Direct dependencies are easy. Transitives are where vulnerabilities hide.

#Gradle + #GitHubActions now automate the submission of your entire resolved graph.

Stop auditing. Start automating. 🛡️

blog.gradle.org/avoid-supply-chain-disas...

3 0 0 0

roxsross

@roxsross.bsky.social

1 week ago

🔄 Postman integra la invocación de código API en flujos de Git

Gestiona especificaciones y colecciones API desde repositorios Git, simplificando flujos para agentes de IA

devops.com/postman-adds-ability-to-...

#APIs #GitHubActions #CI_CD #RoxsRoss

0 0 0 0

Joe Glombek

@masto.joe.gl

1 week ago

GitHub Actions .NET and Azure workflows locally with Act Act is a fantastic tool for testing GitHub actions locally instead of pushing that 10th commit in a row called Testing GitHub Actions (again) but configuring it to work correctly can be a balancing act, so here are some tips for getting Act working with your .NET CI/CD flows.

On Friday I #Blogged about running #GitHubActions locally using #act, with a particular focus on #DotNet and #Azure.

https://joe.gl/ombek/blog/act/

0 1 0 0

Awesome Agents

@awesomeagents.bsky.social

1 week ago

An AI Agent Just Pwned Trivy's 32K-Star Repo via GitHub Actions An autonomous agent powered by Claude Opus 4.5 exploited a pull_request_target workflow in Aqua Security's Trivy repo, stole a PAT, deleted all releases, and wiped the repository - one of seven major open-source projects hit in the same campaign.

An AI Agent Just Pwned Trivy's 32K-Star Repo via GitHub Actions

awesomeagents.ai/news/hackerbot-claw-triv...

#Security #SupplyChain #GithubActions

1 0 0 0

atsushifx

@atsushifx.bsky.social

2 weeks ago

CI/CDの「Gateパターン」解説記事を書きました。

パイプライン入口に検証レイヤーを置き、権限不足・ツール不足・バージョン不一致をFail
Fastで検出する設計パターンです。GitHub Actions の Composite Action（Validate
Environment）での実装例も含めて解説しています。

zenn.dev/atsushifx/ar...

#GitHubActions #CI #DevOps

2 0 0 0

Erik Moreau | Microsoft MVP

@erikmoreau.bsky.social

2 weeks ago

Automate AI evaluations with Microsoft Foundry and GitHub Actions

2026 - Day 58 #MicrosoftLearn achievement of the day: "Automate #AI evaluations with #MicrosoftFoundry and #GitHubActions" badge! I hope this inspires you to start your own @microsoftlearn.bsky.social journey! #AlwaysLearning #MVP #365DaysofLearn learn.microsoft.com/api/achievem... #MSLearnBadge

0 0 0 0

Can

@canyesilyurt.com

2 weeks ago

Finally! GitHub Actions ditching the auto-zip for artifacts is a small but mighty quality-of-life upgrade. My workflows just got a little less… compressed. 😉 #GitHubActions

0 0 0 0

Gradle Technologies

@gradle.com

2 weeks ago

Lessons learned modernizing Apache Kafka CI builds with Develocity and GitHub Actions | Gradle Get the lessons-learned from the migration from Apache Kafka's migration from Jenkins to GitHub Actions, including how Develocity helped quantify performance gains and prove ROI.

📅 MAR-12 📅

Modernizing #ApacheKafka's CI was a masterclass in DPE. 🛠️

✅ Accelerated builds

✅ Fixed flaky signals

✅ Scaled with observability

Join us for the blueprint and lessons learned!
👇 👇 👇

https://tinyurl.com/45985t9r

#Develocity #GitHubActions #GHA #CImigration #CI

0 0 0 0

Mickaël CANOUIL, Ph.D.

@mickael.canouil.fr

2 weeks ago

A merged GitHub pull request titled "chore(deps): update mcanouil/iconify extension to 3.1.0 #260", showing 2 commits, 10 checks, and 6 files changed with +402 and -117 lines. A bot comment from mcanouil-dev describes a minor update to the mcanouil/iconify extension from version 3.0.2 to 3.1.0, including release notes stating the extension enables use of Iconify icons in HTML-based Quarto documents. The PR was automatically generated by quarto-extensions-updater, has the label "Type: Dependencies", and is reviewed by mcanouil.

I don't even need to bother looking for updates for my Quarto dependencies, they come right at me.

#GitHub #Quarto #GitHubActions

5 1 0 0

@salimelakoui.bsky.social

2 weeks ago

Adoptons l'innovation pour transformer notre quotidien ! 💡 #GitHubActions #CI #Innovation

0 0 0 0

Python Bytes

@pythonbytes.fm

2 weeks ago

A Jolting Episode News and announcements from the Python community for the week of Feb 23rd, 2026

🎙️ Python Bytes 470: A Jolting Episode
with @mkennedy.codes and @brianokken.bsky.social
pythonbytes.fm/470
#Python #Jolt #Ruff #Testing #GitHubActions

4 2 0 0

Posts tagged #GithubActions