@donwebmedia.bsky.socialWorkflow reutilizable GitHub Actions: CI sin copiar
¿Copiás el mismo CI en cada repo? Armá un workflow reutilizable GitHub Actions con workflow_call y usalo en cada paquete de tu monorepo hoy mismo
#githubactions #workflow_call #monorepo #compositeactions
@sarubot.bsky.socialAI駆動開発で膨らむGitHub Actions代をMac mini等のセルフホステッドランナーで激減！月8万分を逃がし従量課金を60〜80ドルに圧縮。余剰リソースでAIエージェントを回すのが最高。
- テストを削らずインフラで殴る
- Nix併用で環境トラブル完全排除
@fistfulofknowledge.bsky.socialGitHub Actions ile test, derleme ve dağıtım süreçleri otomatikleştirilebilir. Her kod değişikliğinde otomatik olarak site derlenir ve yayınlanır. #GitHubActions #DevOps #Yazılım
@qiita-trending.bot.chrs.toGitHub Issueの優先度と領域をJevに判定させて、GitHub Actionsでラベルを付ける
@fahimbinamin.bsky.socialI just published a free GitHub Action on the Marketplace: GitHub to GitLab Sync.
Mirror branches and tags to gitlab.com or self-hosted GitLab with a few lines of YAML. Dry run, opt-in prune, masked tokens.
@securityonline.bsky.socialGitHub now expires npm trusted publishing setups that miss a first publish within 48 hours, closing a repo name reuse flaw in 1,500+ packages.
#npm #TrustedPublishing #GitHub #GitHubActions #SupplyChainSecurity #OIDC #OpenSource #DevSecOps
@watermelonkode.bsky.socialSmall automation improvements compound over time. A better release workflow today can save hours of repetitive work every month. #GitHubActions #Automation #DevOps
@donwebmedia.bsky.socialCI de GitHub Actions para Node.js: 4 ajustes que importan
¿Tu CI gasta minutos de más? Armá un workflow de github actions node js con 4 ajustes: cancelar corridas, permisos mínimos, caché y actionlint
#githubactions #nodejs #npm
@devtocash.bsky.socialBonus: cache-to type=gha cuts repeat Docker builds 60-80%. Keep the PR pipeline under 5 min, heavy integration tests run nightly.
Full YAML for CI, staging and prod:
https://devtocash.com/blog/2026-04-15-github-actions-cicd-full-guide
@qiita-trending.bot.chrs.to【AWS】GitHub ActionsとAgentCore Evaluationsでエージェントの評価をCI/CDに組み込んでみた
@dashaun.comA coding agent triggered by every new GitHub issue is prompt injection bait. One prompt-jacked issue and your secrets are gone. Guardrails exist. #PromptInjection #GitHubActions #Security
@chantifiedlens.bsky.socialCheckout my new #GitHub page that makes it easier to find the repos I created over the years that cover #MicrosoftFabric, #AzureSynapseAnalytics, #SQLServer and #Azure SQL Database soulutions, with #GitHubActions and #AzureDevOps workflows.
@david.gardiner.net.auBlogged: Verify.Cli GitHub Action
A GitHub Action for doing snapshot testing against files directly in your workflow
https://david.gardiner.net.au/2026/10/verify-cli-github-action
@qiita-trending.bot.chrs.toGitHub Actionsでよくある3つの『見えない』脆弱性を、自前の静的解析で検出してみた
@canerkaseler.bsky.socialA good CI pipeline should give developers confidence before release. Automation is valuable when it removes uncertainty, not when it creates more noise. #GitHubActions #DevOps #SoftwareEngineering
@watermelonkode.bsky.socialYour CI pipeline is part of your engineering culture. Fast feedback, reliable checks, and clear failures help teams ship with confidence. #GitHubActions #CICD #DevOps
@sarubot.bsky.socialGitHub Actions推奨セキュリティ実施率はわずか17.5%！NTT調査で無防備な実態が発覚。
・権限最小化やSHA固定の未実施
・CI/CDがサプライチェーン攻撃の的に
・便利さの裏で設定の形骸化が深刻
ワークフロー防衛も急務！
@silentstars.dev💎 Underrated pick
action — The official RunsOn action
@darryl-ruggles.cloud#Terraform #DriftDetection #GitHubActions #InfrastructureAsCode #DevSecOps
Using Infrastructure as Code (IaC) tools like Terraform to manage your resources is recommended. With IaC, drift is a key concept, and it isn’t watched closely enough. It usually gets noticed at