#github-actions
#github-actions
[ follow ]
#cicd #gitops #aws-eks #argo-cd #cicd-security #security #devops #supply-chain #npm #automation #sbom #secret-scanning
fromInfoQ
1 week agoGitHub Agentic Workflows Unleash AI-Driven Repository Automation
We began GitHub Agentic Workflows as an investigation into a simple question: what does repository automation with strong guardrails look like in the era of AI coding agents? A natural place to start was GitHub Actions, the heart of scalable repository automation on GitHub. GitHub Agentic Workflows leverage LLMs' natural language understanding to let developers define automation goals in simple Markdown files describing the desired outcome.
Software development
fromInfoQ
2 weeks agoLinkedIn Leverages GitHub Actions, CodeQL, and Semgrep for Code Scanning
LinkedIn has redesigned its static application security testing pipeline (SAST) to provide consistent, enforceable code scanning across a GitHub-based, multi-repository development environment. The initiative was a result of the company's shift-left strategy by delivering fast, reliable, and actionable security feedback directly in pull requests, strengthening the security of LinkedIn's code and infrastructure and helping protect members and customers.
Information security
fromMouse Vs Python
1 month agoHow to Switch to ty from Mypy - Mouse Vs Python
The newest type checker on the block is Astral's ty, the maker of Ruff. Ty is another super-fast Python utility written in Rust. To install ty with uv, run the following: uv tool install ty@latest If you do not want to use uv, you can use the standalone installer. Instructions vary depending on your platform, so it is best to refer to the documentation for the latest information. Note: Technically, you can use pip or pipx to install ty as well.
Python
DevOps
fromStephane's Blog
1 month agoAutomating TLS Certificate Monitoring with GitHub Actions, certificate_watcher, and Slack
Combine certificate_watcher with a weekly GitHub Actions workflow and Slack notifications to monitor SSL/TLS certificate expirations serverlessly using a Git-hosted hosts list.
Information security
fromMedium
5 months agoFrom Jenkins to GitHub Actions: Evolving a Secure DevSecOps Pipeline with Canary Deployments
Migrate CI to GitHub Actions, enhance secrets security, adopt canary progressive delivery, and expose apps via Ingress to create a modern, resilient GitOps CI/CD pipeline.
Information security
fromfaun.pub
5 months agoFrom Jenkins to GitHub Actions: Evolving a Secure DevSecOps Pipeline with Canary Deployments
Migrate CI to GitHub Actions, strengthen security and secrets management, adopt canary progressive delivery, and expose applications via NGINX Ingress for scalable DevSecOps pipelines.
Information security
fromMedium
5 months agoFrom Jenkins to GitHub Actions: Evolving a Secure DevSecOps Pipeline with Canary Deployments
Migrate CI from Jenkins to GitHub Actions; strengthen secrets and security; adopt canary progressive delivery; use Ingress to expose applications for scalable DevSecOps pipelines.
Software development
fromGitHub
5 months agoGitHub - azat-io/actions-up: Interactive CLI tool to update GitHub Actions to latest versions with SHA pinning
Automatically discover, update, and SHA-pin GitHub Actions across workflows for secure, reproducible CI with interactive batch updates and CI integration.
[ Load more ]