DEV Community

GitHub Actions

GitHub Actions helps you automate, customize, and execute your software development workflows right in your repository. You can discover, create, and share actions to perform any job you'd like, including CI/CD, and combine actions in a completely customized workflow.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
`gh attestation verify` said yes to an image we never released

`gh attestation verify` said yes to an image we never released

Comments
15 min read
Put a permission gate on your AI agent in 5 minutes (MCP + Claude Code + CI)

Put a permission gate on your AI agent in 5 minutes (MCP + Claude Code + CI)

Comments 4
2 min read
Securely Merging Pull Requests from Public Contributors

Securely Merging Pull Requests from Public Contributors

Comments
5 min read
I run a Telegram Stars payment bot for $0/month forever — on GitHub Actions, not a server

I run a Telegram Stars payment bot for $0/month forever — on GitHub Actions, not a server

Comments
3 min read
GhostAction hit 30,000 repos this month. A 150-line script to check yours, and what to rotate

GhostAction hit 30,000 repos this month. A 150-line script to check yours, and what to rotate

Comments
9 min read
Four GitHub Actions YAML traps I reproduced (and what a clean scan can't prove)

Four GitHub Actions YAML traps I reproduced (and what a clean scan can't prove)

Comments 3
6 min read
Production API Key Rotation Explained: 6 Least-Privilege Checks for Node.js GitHub Actions

Production API Key Rotation Explained: 6 Least-Privilege Checks for Node.js GitHub Actions

Comments 1
6 min read
Everything I Automated on This Blog

Everything I Automated on This Blog

Comments
6 min read
Automate Flutter Releases with Shorebird + GitHub Actions (Skip App Store Review)

Automate Flutter Releases with Shorebird + GitHub Actions (Skip App Store Review)

5
Comments 1
6 min read
Your Test Alerts Are Untested: Add a Notification Test to Your Pipeline

Your Test Alerts Are Untested: Add a Notification Test to Your Pipeline

Comments 1
4 min read
Scoped API Keys for CI Pipelines: Least-Privilege Rotation After Build Log Leaks

Scoped API Keys for CI Pipelines: Least-Privilege Rotation After Build Log Leaks

Comments
5 min read
I got tired of pasting CI failure logs, so I wrote a CLI that turns one failed run into six sections of context

I got tired of pasting CI failure logs, so I wrote a CLI that turns one failed run into six sections of context

Comments
4 min read
Auditing 38 days of Qiita, Zenn, and dev.to records: scheduled does not mean published on time

Auditing 38 days of Qiita, Zenn, and dev.to records: scheduled does not mean published on time

1
Comments
4 min read
Make GAN Effects Fail in CI, Not on Low-End Devices

Make GAN Effects Fail in CI, Not on Low-End Devices

1
Comments
10 min read
Your Agent Says the Tests Pass. Watch Them

Your Agent Says the Tests Pass. Watch Them

2
Comments 1
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.