Mastodawn

Kätevä tuo dockerin julkaisema builder workflow (https://docs.docker.com/build/ci/github-actions/github-builder/).

Piti vaan hetki raapia päätä miksi tuli ghcr-registryyn hassuja sha-tägejä. Näköjään joku muukin oli sitä jo ihmetellyt ja signaturen poislaitto auttoi (https://github.com/docker/github-builder/issues/109).

#githubAction #docker #tuuskaus

Docker GitHub Builder

Use Docker-maintained reusable GitHub Actions workflows to build images and artifacts with BuildKit.

Docker Documentation

Analyst207 Jun 4

Flaw in Claude Code GitHub Action Exposes Repositories to Hijacking

A security researcher discovered a logic hole in Anthropic's Claude Code GitHub Action that could let attackers hijack vulnerable public repositories with just a single opened GitHub issue. This flaw exploited broad read and write permissions, putting countless repositories at risk.

https://osintsights.com/flaw-in-claude-code-github-action-exposes-repositories-to-hijacking?utm_source=mastodon&utm_medium=social

#Github #ClaudeCode #GithubAction #RepositoryHijacking #EmergingThreats

Flaw in Claude Code GitHub Action Exposes Repositories to Hijacking

Discover the flaw in Claude Code GitHub Action that exposes repositories to hijacking. Learn how to protect your repo now and prevent attacks today effectively.

OSINTSights

Show thread

github.com/ghostwriter May 13

GitHub Actions token format `ghs_APPID_JWT` (~520 chars, variable length).

Regex

NEW: `ghs_[0-9]+_[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+`

https://github.blog/changelog/2026-04-24-notice-about-upcoming-new-format-for-github-app-installation-tokens/#how-to-prepare-for-this-change

OLD: `ghs_[A-Za-z0-9]{36}`

https://github.blog/changelog/2021-03-04-authentication-token-format-updates/

#GitHub #GitHubAction #GitHubServerToken #GitHubToken #Regex

Notice about upcoming new format for GitHub App installation tokens - GitHub Changelog

Starting April 27th 2026 and over the coming weeks, we will begin a staged rollout that updates the format of newly minted GitHub App installation tokens, making them more performant…

The GitHub Blog

Community Packaging Tools Apr 24

Pavel just released new version of vcs-diff-lint 🛠️ The tool (+ GitHub action) for differential code linting.

The highlight: Newly with yamllint support!

Bonus: Fedora's Forgejo instance integration experiment (infra ansible repo):
https://forge.fedoraproject.org/infra/ansible/pulls/3304

#Ansible #YAML #Linter #CI #GitHubAction #FedoraInfra

ci: implement differential yamllint scan

ansible - Fedora Infrastructure Ansible Repository

Fedora Forge

Python Rennes Apr 9

La rediffusion de la session "Optimiser son intégration continue de projet Python (mais pas que)" est en ligne 🎉

Merci Kanoma pour l'accueil et Alex pour la captation vidéo 🙏

- vidéo : https://www.youtube.com/watch?v=Dzjjwhx2Amk
- diaporamas : https://github.com/python-rennes/sessions/tree/main/python-rennes-2026.03.17-ci-cd-projets-python-2

Et oui ! Python Rennes a désormais son organisation github pour stocker les liens de rediffusion et les supports de présentation 🥳 Les sessions précédentes seront rajoutées progressivement - abonnez-vous 🔔

#Python #meetup #githubaction #genAI

[Python Rennes] Python pour le Père Noël

YouTube

Jeroen Habets Mar 8

My head of ops complained that #GitHub CI/CD has become _so_ unreliable, specifically #GitHubAction s and its scheduler (even with #selfhosted runners) that we need to migrate to an alternative.

We're not alone, see e.g. #Zig https://ziglang.org/news/migrating-from-github-to-codeberg/

The graph shows the dramatic decrease in availability after the #Microsoft #acquisition ...

Revath S Kumar

Feb 24

Blogged : update semantic version using #bash script

https://blog.revathskumar.com/2026/02/update-semantic-version-using-bash-script.html

#zig #GithubAction #semver

update semantic version using bash script

For all of my JavaScript projects, I depend on the npm version command to update the version number for generating a release. So when I wanted to release my Zig project (clipz), I was looking for something similar to update the version number in the build.zig.zon file. Since Zig doesn’t have any command equivalent to npm version, I decided to go with a simple shell script.

ahmetalmaz Feb 22

Dotenvx WRONG_PRIVATE_KEY in GitHub Actions Fix

https://ahmetalmaz.com/blog/dotenvx-wrong-private-key-github-actions-fix/

#dotenvx #GitHub #GitHubAction #HowTo

Ben Hardill Feb 9

Having seen the post about GitHub Actions being crap (and mainly agreeing with it) I would like to move the conversation to the combination of GH Actions and dependabot carrying out a near continuous DoS attack on my inbox

#GitHubAction #GitHub #Email