15 stories tagged ci-cd, newest first.
44 points by acossta | 0 comments
Wiz Research blog post analyzing Gheist, a campaign using stolen GitHub tokens to plant workflows that dump repository secrets, with IOCs and response guidance.
38 points by alexmolas | 22 comments
Will Larson describes Imprint's `small-change` process, which uses CI checks and AI review skills to fast-track approval of small, low-risk pull requests.
93 points by hising | 63 comments
GitHub status page incident report about a service disruption affecting GitHub Actions.
624 points by cebert | 315 comments
GitHub status page showing an incident with degraded availability of Actions and Pages caused by authentication issues blocking Actions runs.
844 points by tosh | 412 comments
Socket Research blog post reporting that Bitwarden CLI 2026.4.0 was compromised via an abused GitHub Action as part of the Checkmarx supply chain campaign.
344 points by vinhnx | 95 comments
Astral blog post by William Woodruff describing the techniques Astral uses to secure its open source tools and their build, test, and release processes against supply chain attacks.
435 points by xlii | 298 comments
A personal blog post ranting about why the author strongly dislikes GitHub Actions as a CI/CD tool.
439 points by nklow | 206 comments
GitHub changelog post announcing upcoming GitHub Actions pricing changes, including charges for self-hosted runners starting March 2026.
767 points by kevin-david | 797 comments
GitHub announcement dated December 15, 2025 describing upcoming pricing changes for GitHub Actions.
408 points by robin_reala | 236 comments
Andrew Nesbitt's blog post arguing GitHub Actions functions as a package manager lacking lockfiles, integrity hashes, and other supply chain safeguards.
653 points by qianli_cs | 516 comments
A Feldera blog post describing the company's frustrations and difficulties using GitHub Actions for CI/CD.
453 points by umur | 117 comments
Ubicloud product page for managed, open-source x64 and Arm GitHub Actions runners claiming 10x lower cost with a one-line workflow change.
444 points by roblabla | 92 comments
Blog post by John Stawinski describing how his team executed a critical supply chain attack on PyTorch via its GitHub Actions CI infrastructure.
386 points by woodruffw | 208 comments
A blog post by a longtime GitHub Actions user listing frustrations with the CI service and suggesting how GitHub could improve or fix them.
411 points by adamgordonbell | 251 comments
Earthly blog post by Vlad A. Ionescu explaining why the company shut down Earthly CI, its fast CI product, and the lessons learned.