#github-actions

[ follow ]
Node JS
fromDEV Community
2 days ago

I Scanned 10 Popular GitHub Actions Workflows for Undocumented Environment Variables. Here's What I Found.

Many popular JavaScript projects have undocumented environment variables in their GitHub Actions workflows, leading to potential issues for developers forking these projects.
#python
fromMouse Vs Python
2 months ago
Python

How to Switch to ty from Mypy - Mouse Vs Python

Python supports type hinting, but type checking requires external tools like mypy, Pyright, and the new ty.
fromPycoders
9 months ago
Python

PyCoder's Weekly | Issue #686

The article discusses the advancements in free-threaded Python, GPU programming, and the role of GitHub Actions in enhancing DevOps efficiency.
Python
fromMouse Vs Python
2 months ago

How to Switch to ty from Mypy - Mouse Vs Python

Python supports type hinting, but type checking requires external tools like mypy, Pyright, and the new ty.
#agentic-workflows
fromInfoQ
1 month ago

GitHub Agentic Workflows Unleash AI-Driven Repository Automation

We began GitHub Agentic Workflows as an investigation into a simple question: what does repository automation with strong guardrails look like in the era of AI coding agents? A natural place to start was GitHub Actions, the heart of scalable repository automation on GitHub. GitHub Agentic Workflows leverage LLMs' natural language understanding to let developers define automation goals in simple Markdown files describing the desired outcome.
Software development
fromInfoQ
1 month ago

LinkedIn Leverages GitHub Actions, CodeQL, and Semgrep for Code Scanning

LinkedIn has redesigned its static application security testing pipeline (SAST) to provide consistent, enforceable code scanning across a GitHub-based, multi-repository development environment. The initiative was a result of the company's shift-left strategy by delivering fast, reliable, and actionable security feedback directly in pull requests, strengthening the security of LinkedIn's code and infrastructure and helping protect members and customers.
Information security
Tech industry
fromTheregister
1 month ago

Azure outages ripple across multiple dependent services

Azure experienced two separate service outages affecting Virtual Machine management operations and Managed Identity across East and West US, disrupting numerous dependent services.
Software development
fromInfoWorld
1 month ago

GitHub Artifact Attestations sign and verify software artifacts

Artifact Attestations in GitHub Actions is now generally available to secure artifacts and verify provenance using Sigstore, Kubernetes Policy Controller, and gh attestation verify.
fromMouse Vs Python
2 months ago

How to Switch to ty from Mypy - Mouse Vs Python

The newest type checker on the block is Astral's ty, the maker of Ruff. Ty is another super-fast Python utility written in Rust. To install ty with uv, run the following: uv tool install ty@latest If you do not want to use uv, you can use the standalone installer. Instructions vary depending on your platform, so it is best to refer to the documentation for the latest information. Note: Technically, you can use pip or pipx to install ty as well.
Python
DevOps
fromStephane's Blog
2 months ago

Automating TLS Certificate Monitoring with GitHub Actions, certificate_watcher, and Slack

Combine certificate_watcher with a weekly GitHub Actions workflow and Slack notifications to monitor SSL/TLS certificate expirations serverlessly using a Git-hosted hosts list.
#cicd
#self-hosted-runners
#supply-chain
Software development
fromInfoWorld
3 months ago

10 MCP servers for devops

Model Context Protocol enables AI assistants to perform multi-step devops tasks—Git, CI/CD, IaC, observability—via standardized servers like GitHub's MCP.
#cicd-security
#zig
#git-sync
#sbom
Information security
fromMedium
5 months ago

From Jenkins to GitHub Actions: Evolving a Secure DevSecOps Pipeline with Canary Deployments

Migrate CI to GitHub Actions, enhance secrets security, adopt canary progressive delivery, and expose apps via Ingress to create a modern, resilient GitOps CI/CD pipeline.
#gemini-cli
fromZDNET
5 months ago
Software development

Google's new Jules Tools is very cool - how I'm using it and other Gemini AI CLIs

fromZDNET
5 months ago
Software development

Google's new Jules Tools is very cool - how I'm using it and other Gemini AI CLIs

Information security
fromfaun.pub
5 months ago

From Jenkins to GitHub Actions: Evolving a Secure DevSecOps Pipeline with Canary Deployments

Migrate CI to GitHub Actions, strengthen security and secrets management, adopt canary progressive delivery, and expose applications via NGINX Ingress for scalable DevSecOps pipelines.
Information security
fromMedium
5 months ago

From Jenkins to GitHub Actions: Evolving a Secure DevSecOps Pipeline with Canary Deployments

Migrate CI from Jenkins to GitHub Actions; strengthen secrets and security; adopt canary progressive delivery; use Ingress to expose applications for scalable DevSecOps pipelines.
Software development
fromGitHub
6 months ago

GitHub - azat-io/actions-up: Interactive CLI tool to update GitHub Actions to latest versions with SHA pinning

Automatically discover, update, and SHA-pin GitHub Actions across workflows for secure, reproducible CI with interactive batch updates and CI integration.
DevOps
fromInfoQ
6 months ago

AWS Lambda Adds Support for GitHub Actions

AWS Lambda supports GitHub Actions for declarative, OIDC-authenticated deployments of functions via .zip or container images, including S3 support and configurable function settings.
Software development
fromRealpython
9 months ago

Python Continuous Integration and Deployment Using GitHub Actions - Real Python

GitHub Actions is essential for Python developers to automate workflows and adapt software projects to evolving demands.
fromHackernoon
5 years ago

Waiting: The Subtle Art That You Should Master | HackerNoon

Waiting in Kubernetes can seem counterintuitive, but managing service dependencies through startup probes is essential for ensuring applications connect seamlessly during initialization.
DevOps
[ Load more ]