26 stories tagged github-actions, newest first.
44 points by acossta | 0 comments
Wiz Research blog post analyzing Gheist, a campaign using stolen GitHub tokens to plant workflows that dump repository secrets, with IOCs and response guidance.
49 points by ericholiveira | 28 comments
GitHub repository for Farol, an open-source CLI and GitHub Action that scores pull request merge risk, highlighting risky files, reach, diff coverage and contract breaks.
144 points by gateauxd | 111 comments
GitHub status page incident report on degraded availability for GitHub Actions, GitHub Pages and Webhooks.
149 points by dkpk | 134 comments
GitHub status page incident report for an outage affecting Actions, Pull Requests and Issues.
221 points by gagan2020 | 171 comments
GitHub status page incident report for an outage affecting Git operations, pull requests, and GitHub Actions.
8 points by wbnns | 3 comments
GitHub status page incident report for an outage affecting Git operations, pull requests, and GitHub Actions.
93 points by hising | 63 comments
GitHub status page incident report about a service disruption affecting GitHub Actions.
408 points by galnagli | 151 comments
Wiz blog post describing how its Red Agent autonomously exploited a GitHub Actions vulnerability introduced by a Copilot Autofix to access Snowflake's internal Jira.
483 points by Footkerchief | 402 comments
GitHub status page incident report about degraded availability of GitHub Actions and Pages.
624 points by cebert | 315 comments
GitHub status page showing an incident with degraded availability of Actions and Pages caused by authentication issues blocking Actions runs.
844 points by tosh | 412 comments
Socket Research blog post reporting that Bitwarden CLI 2026.4.0 was compromised via an abused GitHub Action as part of the Checkmarx supply chain campaign.
344 points by vinhnx | 95 comments
Astral blog post by William Woodruff describing the techniques Astral uses to secure its open source tools and their build, test, and release processes against supply chain attacks.
423 points by richtr | 221 comments
The Register article on GitHub's recent string of outages and slowdowns affecting Actions, pull requests, notifications and Copilot, falling short of three nines.
432 points by mandel_x | 360 comments
GitHub repository for memento, an MIT-licensed tool and GitHub Action that records AI coding (Codex) sessions alongside each git commit.
349 points by Nezteb | 266 comments
GitHub status page incident report for degraded service affecting Issues, Actions and Git operations.
435 points by xlii | 298 comments
A personal blog post ranting about why the author strongly dislikes GitHub Actions as a CI/CD tool.
439 points by nklow | 206 comments
GitHub changelog post announcing upcoming GitHub Actions pricing changes, including charges for self-hosted runners starting March 2026.
767 points by kevin-david | 797 comments
GitHub announcement dated December 15, 2025 describing upcoming pricing changes for GitHub Actions.
408 points by robin_reala | 236 comments
Andrew Nesbitt's blog post arguing GitHub Actions functions as a package manager lacking lockfiles, integrity hashes, and other supply chain safeguards.
924 points by Brajeshwar | 542 comments
The Register article reporting that the Zig Software Foundation is moving from GitHub to Codeberg, citing GitHub's decline under Microsoft's AI focus and an unaddressed Actions bug.
1182 points by jamesberthoty | 965 comments
StepSecurity blog post reporting that @ctrl/tinycolor and 40+ npm packages were compromised by self-propagating malware that steals cloud credentials.
653 points by qianli_cs | 516 comments
A Feldera blog post describing the company's frustrations and difficulties using GitHub Actions for CI/CD.
838 points by tosh | 261 comments
Hamel Husain's blog post explaining why he uses Dokku as a self-hosted Heroku-like platform, with minimal examples, GitHub Actions deployment, and tips.
453 points by umur | 117 comments
Ubicloud product page for managed, open-source x64 and Arm GitHub Actions runners claiming 10x lower cost with a one-line workflow change.
444 points by roblabla | 92 comments
Blog post by John Stawinski describing how his team executed a critical supply chain attack on PyTorch via its GitHub Actions CI infrastructure.
386 points by woodruffw | 208 comments
A blog post by a longtime GitHub Actions user listing frustrations with the CI service and suggesting how GitHub could improve or fix them.