ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Objective Keep long-lived cloud access keys stored as GitHub Actions secrets from remaining valid after expiration or rotation, without relying on manual cleanup. This applies to GitHub Actions on GitHub.com and GitHub Enterprise Server where Actions is enabled. GitHub Actions does not display or enforce an expiration date for encrypted repository, environme
I have a private repo with a GitHub Action that pushes the code to an AWS S3 bucket when there's a new push to the master branch. I need a pair of access keys to be able to push the contents and I'm storing them as GitHub Secrets and referencing them as environment variables in the build script. Now I would like to make this repo public in the near future, a
Implementing least-privilege authentication in GitHub Actions via OpenID Connect (OIDC) allows workflows to exchange short-lived tokens for cloud IAM roles. This removes the need for long-lived secrets but introduces complexity in trust relationship configuration. In a multi-tenant organization with numerous repositories, a broad trust policy based only on t
Review App Automation and Scope Isolation Implementing a CI/CD pipeline using GitHub Actions to automate Scalingo Review Apps requires a balance between automation and security. To prevent the accidental modification of production resources, the integration should rely on a token with limited scopes rather than a full administrative account. The goal is to u
I am attempting to deploy a simply Web Api App to Azure to help me familiarise myself with Azure services and Github Actions for deployment. Below are the steps I have undertaken 1 - Create a new .NET 7 Web Api App in Visual Studio. This creates a boilerplate Weatherforecast API app and runs as expected locally through VS. 2- Create a new github repository a
Goal Determine whether the built-in timing information shown for each workflow step in the GitHub Actions UI on GitHub.com isolates artifact upload and download duration, or rolls that time into the surrounding step, before deciding where to focus optimization. Constraints and uncertainty Step timing in the run UI reflects wall-clock time on the runner. Arti
Goal Select a cache key strategy for GitHub Actions dependency caching that balances artifact freshness against cache hit rates in a repository with frequent transitive dependency updates. Constraints and uncertainty The actions/cache action uses an immutable primary key (typically a hash of lockfiles) and optional restore-keys for fallback. Stale restores o
I am writing a Github action where I want to use postgres:11 image as a service. But everytime, it tries to start I get error Failed to initialize, db service is unhealthy. Github action looks like: name: CI on: [push] jobs: unit_tests: name: 'Run unit tests' runs-on: ubuntu-latest services: db: image: postgres:11 ports: ['5432:5432'] options: >- --health
I am running the google-github-actions/deploy-cloudrun Action on Github, which fails when trying to push a docker image to Artifact Registry . I authenticate through an identity pool The docker image builds successfully However, pushing the image to Google Artifact Registry fails with name invalid: Missing image name. Pushes should be of the form docker push
github
git
scalingo
githubactions
docker