#githubactions

23 hours ago

ASCII art in a log file for Super-Linter illustrating a possum saying "Don't mind me I'm just looking for some trash..."

I love my little trash-sniffing space rat (Super Linter GitHub Actions CI job).
@github.com #GitHubActions #SuperLinter

7 3 1 0

Aleksei Aleinikov

@aleksei-aleinikov.bsky.social

1 day ago

How I Set Up CI/CD for a Docker App in 2026 CI/CD is not overkill when you are tired of repeating the same steps.

CI/CD for a Docker app is not overengineering.

It’s just the moment you stop relying on memory:
.env for config
Dockerfile for repeatability
GitHub Actions for failed-early builds
Docker Hub for one-command delivery

medium.com/devmap/how-i...

#Docker #CICD #DevOps #GitHubActions #Python

1 0 0 0

さるぼっと@IT最新動向を配信

@sarubot.bsky.social

2 days ago

GitHub Actions のコストが思ったより高かったので ## 2. ランナー単価の最適化次に見直したのがランナー単価です。ランナーの確認をしたところ、一部ワークフローが、高スペックのカスタムランナーで動いていることを発見しました。この高スペックのカスタムランナーに変更した当時は在籍していなかったため、経緯を確認したところ、過去に “安定性を優先して” 導入していたとのことでした。 ### ubunts-latestへの移行コスト内訳を調べたところ、このカスタムランナーがコストの大半を占めていました。本当にこのランナーじゃないと動かないのか？と再度検証したところ、当時問題だったといった課題は、リファクタリング等の効果も

GitHub Actionsのコスト削減は破壊力が凄まじい。カスタムランナーを見直しCIを最適化しただけで月間費用が38%減。

・高スペックを標準に戻し35%削減
・RenovateのCI連打を抑制

#CI #GitHubActions

0 0 0 0

Seb in the cloud ☁️

@sebsto.bsky.social

5 days ago

le podcast 🎙 AWS ☁️ en 🇫🇷 : RunsOn

Exécutez vos GitHub Actions sur EC2 dans votre compte AWS.
Cyril Rohr explique l'archi, le cache S3 transparent et comment gérer 80k jobs/jour.

🎧 Dans vos apps de podcast et ici francais.podcast.go-...

#AWS #GitHubActions

1 0 0 0

Alex0007

@alex0007.mastodon.social.ap.brid.gy

5 days ago

Original post on mastodon.social

There is a bug in Claude Code in GitHub Actions that requires MCP servers to be installed beforehand, delaying startup time. The optimal approach would be to install MCP servers in parallel and connect only when needed, but the MCP_TIMEOUT variable is completely ignored.

This is frustrating […]

1 0 1 0

さるぼっと@IT最新動向を配信

@sarubot.bsky.social

6 days ago

ファインディでのGitHub Actions自動化の事例 - Findy Tech Blog # Findy Tech Blog # ファインディでのGitHub Actions自動化の事例 GitHub Actions CI/CD フロントエンドこの記事をはてなブックマークに追加ファインディ株式会社でフロントエンドのリードをしております新福(@puku0x)です。 GitHub Actionsは、CI/CD以外にも様々な業務の効率化に役立ちます。この記事では、弊社で実施しているGitHub Actionsを使った自動化について紹介します。自動化 + 担当者アサイン + ラベル設定 + リリース + QAチェック項目の抽出 + 定期実行

GitHub ActionsはCI/CD以上の可能性を秘めています。開発UXを最大化する究極の省人化事例を紹介します。

・担当者アサイン自動化
・PRラベルの動的制御
・リリースフローの完全自動化
・休日判定付きの堅実設計

#GitHubActions #DevOps
00

0 0 0 0

Next SNS ラボ編集者

@nextsns-news.com

1 week ago

【ソースコード公開】ブログ自動投稿システムを作って失敗した話。供養のためにPythonコードとYMLファイルを全部載せました。
https://nextsns-news.com/github-actions-openai/
#GitHubActions #OpenAI

0 0 0 0

@joedudev.bsky.social

1 week ago

GitHub - joedudev/vite-blackjack Contribute to joedudev/vite-blackjack development by creating an account on GitHub.

🚀 New satellite launched! 🛰️ Created a standalone Vite 8 Blackjack station to master GitHub Actions & CI/CD workflows. 🌌

Building modern, automated pipelines on my journey to Full-Stack Developer. 👨‍🚀✨

Check the orbit:
github.com/joedudev/vit...

#JavaScript #ViteJS #GitHubActions #WebDev #Coding

2 0 0 0

joschi

@joschi.hachyderm.io.ap.brid.gy

1 week ago

Do you want #OpenTelemetry support in #GitHubActions?

Since GitHub is asking for input on their GitHub Actions roadmap, maybe upvoting github.com/orgs/community/discussio... will give them a nudge to implement it. 😄

0 0 0 0

joschi

@joschi.work

1 week ago

What’s coming to our GitHub Actions 2026 security roadmap - Feedback & Suggestions · community · Discussion #190621 🏷️ Discussion Type Product Feedback 💬 Feature/Topic Area Other Discussion Details We recently published a blog post outlining capabilities GitHub is actively investing in and developing for Actions...

Do you want #OpenTelemetry support in #GitHubActions?

Since GitHub is asking for input on their GitHub Actions roadmap, maybe upvoting github.com/orgs/communi... will give them a nudge to implement it. 😄

1 0 1 0

Shoper Gamer

@shopergamer.bsky.social

1 week ago

Github Actions

GitHub Actions คืออะไร

อ่านต่อ : www.blockdit.com/posts/69c686...

#ShoperGamer #Github #GithubActions #CI #CD #Workflows #SelfhostRunner #Automate #Study #Knowledge #Feed

2 0 0 0

Ubuntu

@ubuntu.activitypub.awakari.com.ap.brid.gy

1 week ago

GitHub Actions Changed Pricing in 2026 — Here's Exactly What You're Paying Now In January 2026, GitHub updated their Actions runner pricing. Most teams didn't notice. Here's...

GitHub Actions Changed Pricing in 2026 — Here's Exactly What You're Paying Now In January 2026, GitHub updated their Actions runner pricing. Most teams didn't notice. Here's exact...

#githubactions #cicd #devops #webdev

Origin | Interest | Match

0 0 0 0

Pure Tech

@puretech.news

1 week ago

No More Silent Analytics Bugs: All it Takes is One SDK and One Github Action | HackerNoon Avoid silent analytics bugs by using two Open Source tools. First, get free from vendor lock-in by replacing the vendor analytics SDKs with RudderStack SDK that

No More Silent Analytics Bugs: All it Takes is One SDK and One Github Action #Technology #SoftwareEngineering #Other #Analytics #SoftwareDevelopment #GitHubActions

hackernoon.com/no-more-silent-analytics...

1 0 0 0

HackerNoon

@handle.invalid

1 week ago

No More Silent Analytics Bugs: All it Takes is One SDK and One Github Action

Avoid silent analytics bugs by using two Open Source tools. First, get free from vendor lock-in by replacing the vendor analytics SDKs with RudderStack SDK that #githubactions

0 0 0 0

Cybersecurity News Everyday

@hendryadrian.bsky.social

2 weeks ago

TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions TeamPCP compromised Aqua Security's trivy-action and injected a credential-stealing payload that harvested CI runner memory, queried cloud instance metadata, enumerated webhook URLs, and exfiltrated encrypted secrets to typosquat domains. The identical stealer appeared days later in Checkmarx's ast-github-action (v2.3.28), indicating stolen credentials from the Trivy compromise were used to poison additional GitHub Actions; #TeamPCP #Trivy

TeamPCP compromised Aqua Security’s Trivy GitHub Action by injecting a credential-stealing payload that harvested secrets from CI runners. The same stealer hit Checkmarx’s GitHub Action days later, spreading the attack. #SupplyChain #GitHubActions

0 0 0 0

roxsross

@roxsross.bsky.social

2 weeks ago

⚙️ Automatiza tu código desde el día 1 con GitHub Actions

github.blog/developer-skills/github/...

#GitHub #GitHubActions #DevOps #Programación

0 0 0 0

CyberMaterial

@cybermaterial.bsky.social

2 weeks ago

Teampcp Hacks Checkmarx via Stolen CI
Read More: buff.ly/6nVcv6O

#TeamPCP #Checkmarx #GitHubActions #CICDSecurity #SupplyChainAttack #SecretsTheft #Typosquatting #DevSecOps

0 0 0 0

Pixels and Pulse - Blog

@pixelsandpulse.bsky.social

2 weeks ago

Trivy was compromised AGAIN! A security scanner designed to protect your CI/CD became the attack vector, stealing credentials. Are your pipelines safe?

thepixelspulse.com/posts/trivy-github-actio...

#trivy #aquasecurity #githubactions

1 0 0 0

CyberMaterial

@cybermaterial.bsky.social

2 weeks ago

Trivy GitHub Action Breach Hits CI/CD
Read More: buff.ly/tfZnIy8

#Trivy #AquaSecurity #GitHubActions #CICDSecurity #SupplyChainAttack #SecretsTheft #DevSecOps #InfosecNews

0 0 0 0

さるぼっと@IT最新動向を配信

@sarubot.bsky.social

2 weeks ago

GitHub Actions のコストが思ったより高かったので ## 2. ランナー単価の最適化次に見直したのがランナー単価です。ランナーの確認をしたところ、一部ワークフローが、高スペックのカスタムランナーで動いていることを発見しました。この高スペックのカスタムランナーに変更した当時は在籍していなかったため、経緯を確認したところ、過去に “安定性を優先して” 導入していたとのことでした。 ### ubunts-latestへの移行コスト内訳を調べたところ、このカスタムランナーがコストの大半を占めていました。本当にこのランナーじゃないと動かないのか？と再度検証したところ、当時問題だったメモリ不足テストの不安定さとい

GitHub Actionsのコスト削減は実行時間より「ランナー単価」と「実行回数」の見直しが最短です。

・カスタムランナーをubuntu-latestへ移行
・RenovateのCI実行を抑制

この2点で月間コスト38%削減。

#GitHubActions #CIコスト削減

0 0 0 0

Winbuzzer

@winbuzzer.com

2 weeks ago

Trivy Breached Twice in a Month via GitHub Actions Attackers have hijacked 75 of 76 GitHub Actions tags for Aqua Security's Trivy scanner, distributing credential-stealing malware through CI/CD pipelines.

winbuzzer.com/2026/03/23/t...

Trivy Breached Twice in a Month via GitHub Actions

#GitHub #GitHubActions #Cybersecurity #Malware #Cybercrime #SecurityBreach #OpenSource #Hackers #npm #Javascript #SoftwareDevelopment #CloudComputing #DataBreaches #Trivy #AquaSecurity #TeamPCP #CanisterWorm

1 0 0 0

Pixels and Pulse - Blog

@pixelsandpulse.bsky.social

2 weeks ago

Trivy's supply chain hit AGAIN! Attackers force-pushed infostealer malware to 75 Git tags, exploiting persistent credentials & mutable versioning. A critical lesson in CI/CD security.

thepixelspulse.com/posts/trivy-supply-chain...

#trivy #aquasecurity #githubactions

1 0 0 0

The Daily Tech Feed

@thedailytechfeed.com

2 weeks ago

Trivy's GitHub Actions compromised again, exposing CI/CD secrets. Developers urged to enhance security measures. #CyberSecurity #DevSecOps #CI/CD #GitHubActions Link: thedailytechfeed.com/trivys-githu...

0 0 0 0

David Gardiner

@david.gardiner.net.au

2 weeks ago

Delete old GitHub Actions artifacts with PowerShell My GitHub Actions artifact usage was nearing the maximum quota for the month, so I needed a script to delete old artifacts

Blogged: Delete old GitHub Actions artifacts with PowerShell

david.gardiner.net.au/2026/03/dele...

#GitHub #GitHubActions #PowerShell

0 0 0 0

woody｜AI×実用ツール専門

@woody-ai-tools.bsky.social

2 weeks ago

2026年3月19日の Trivy 再侵害の概要と対応指針 2026年3月19日、Aqua Security が提供するOSSセキュリティスキャナ Trivy のエコシステムが、3週間以内に2度目のサプライチェーン攻撃を受けました。攻撃者は aquasecurity/setup-trivy および aquasecurity/trivy-action の2つのGitHub Actionsに悪意あるコードを注入し、これらを利用するCI/CDパイプラインからクレデンシャルを大規模に窃取するペイロードを配布しました。

【セキュリティ警告】CI/CDツール「Trivy」のGitHub Actionsが侵害されたようです。攻撃者がタグを強制更新し、悪意あるコードを配信。CI/CDパイプライン上のシークレット情報が流出する恐れあり。

GitHub Actions利用者は即座にログ確認と認証情報のローテーションを！

#セキュリティ #DevSecOps #CI/CD #GitHubActions

https://diary.shift-js.info/trivy-compromise/

0 0 0 0

iT4iNT SERVER

@it4intserver.bsky.social

2 weeks ago

Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, was compromised a second time within the span of a month to deliver malware that stole sensitive CI/CD secrets. The latest incident impacted GitHub Actions "aquasecurity/trivy-action" and "aquasecurity/setup-trivy," which are used to scan Docker container images for vulnerabilities and set up GitHub Actions workflow

iT4iNT SERVER Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets VDS VPS Cloud #Trivy #Security #GitHubActions #CyberSecurity #DevOps

0 0 0 0

roxsross

@roxsross.bsky.social

2 weeks ago

⚙️ GitHub para Principiantes: Primeros Pasos con GitHub Actions

Configura tu primer flujo de trabajo de GitHub Actions con esta guía.

github.blog/developer-skills/github/...

#GitHubActions #CI_CD #Automation #RoxsRoss

0 0 0 0

Can

@canyesilyurt.com

2 weeks ago

Okay, GitHub Actions is getting a bunch of backend updates in late March 2026. Looks like they're focusing on performance and reliability behind the scenes. Fingers crossed this means fewer mysterious job failures for my CI/CD pipelines. 🤞 #GitHubActions

1 0 0 0

Can

@canyesilyurt.com

3 weeks ago

Finally, a beginner's guide to GitHub Actions that doesn't assume I'm already a wizard! 🧙‍♂️ This walkthrough on automating issue labeling is actually pretty straightforward. Might finally get those pesky 'needs triage' labels sorted. #GitHubActions #Automation

2 0 0 0