Tag
Miri, a Rust tool, stores all environment variables in the target directory, which when cached in GitHub Actions can leak secrets to pull requests. The Rust team has implemented a fix to only preserve specific variables and advises users to check their CI setups for vulnerabilities.
SlopMonster is a tool that scores AI-generated copy based on pattern detection and cleans it using a rival AI model, integrating with GitHub Actions for automated quality checks.
CloudX has open-sourced a replacement for GitHub's actions/setup-go that optimizes caching to speed up Golang CI workflows by up to 69%.
Security researchers discovered critical vulnerabilities in the default GitHub Actions configurations for Anthropic's Claude Code, Google's Gemini CLI, and OpenAI's Codex, allowing remote code execution through unauthenticated issues. A related privilege escalation flaw in Google's ADK repo highlights systemic weaknesses in the CI/CD scaffolding for these AI agents.
The article explores practical use cases for AI agents beyond code writing, such as fixing merge conflicts, locating relevant issues, and diagnosing GitHub Actions failures, providing prompts and workflows for developers.
An experiment running an AI agent for 23 days to autonomously select and execute tasks via GitHub Actions, with automated checks resulting in a 54% failure rate that enhances efficiency by minimizing manual audits.
This article explains how to configure Dependabot to group dependency updates, reducing pull request noise while maintaining security, using Microsoft's GCToolkit as an example.
macOS CI Burst Runner is an opt-in menu bar controller that turns an idle Mac into extra GitHub Actions capacity with safety features for job management and disk protection.
A truck driver with no coding background built an AI news aggregator using Next.js and Supabase that summarizes and deduplicates news from multiple sources.
The author discusses AI agent frameworks that minimize human intervention, highlighting projects like GitHub Agentic Workflows, OpenClaw, Hermes, and Aeon, and seeks community input on reliable options for long-running agent work.
A tweet by Charlie Marsh highlighting Zizmor as a tool to improve GitHub Actions workflows without explicit details provided.
Aeon is an open-source autonomous agent framework designed for unattended operation, allowing users to configure AI agents once and run them in the background on tasks like monitoring or code reviews using GitHub Actions, with skills defined in Markdown files and features such as self-healing and persistent memory.
This blog post argues that GitHub Actions lacks static OIDC audience constraints, unlike GitLab CI/CD, and that this design weakness poses an increasing security risk as OIDC-based federation becomes more common.
The article explains how to speed up running Haskell scripts with Magix on GitHub Actions by caching dependencies and compiled artifacts, reducing full build times from over 100 seconds to near-instant reruns.
GitHub Models has been retired, causing disruptions for developers using its unified LLM API in GitHub Actions. Simon Willison reflects on the shutdown and his migration to OpenAI's API.
GitHub Models has been retired after a scheduled brownout. Simon Willison discusses the shutdown and how he migrated his GitHub Actions workflow to use OpenAI's API with GPT-5.6 Luna instead.
Aeon is an autonomous agent framework that ships features to repos, finds real vulnerabilities, and deploys live apps without approval loops, running unattended on GitHub Actions. It supports 60+ skills across six harnesses and can write new skills for itself.
GitHub is experiencing a major outage affecting multiple services including GitHub Actions, Pages, Copilot, and Enterprise Importer, with workflow failures and delays. Engineers are actively working on mitigations.
This guide explains how to set up documentation as code using Docusaurus and GitHub Actions, including versioning, automated builds, and grammatical review workflows.
GitHub Actions and Pages are experiencing degraded availability, with workflow runs failing or delayed and some API requests returning errors. GitHub engineers are investigating and applying mitigations.