Any program can be a GitHub Actions shell(yossarian.net)

267 points by woodruffw 1 year ago | 97 comments

PGP signatures on PyPI: worse than useless(blog.yossarian.net)

74 points by woodruffw 3 years ago | 71 comments

Zizmor would have caught the Ultralytics workflow vulnerability(blog.yossarian.net)

74 points by campuscodi 1 year ago | 20 comments

The Journey of Bypassing Ubuntu's Unprivileged Namespace Restriction(u1f383.github.io)

21 points by Bogdanp 1 year ago | 3 comments

Dear GitHub: no YAML anchors, please(blog.yossarian.net)

155 points by woodruffw 1 year ago | 123 comments

GitHub Actions could be so much better(blog.yossarian.net)

386 points by woodruffw 3 years ago | 208 comments

A blog post by a longtime GitHub Actions user listing frustrations with the CI service and suggesting how GitHub could improve or fix them.