#github-actions - August 2022

This is interesting: Tinder Security posted an article about how they look for potential security vulnerabilities in GitHub Actions workflows and they released the tool they built

It’s small right now, but it’s definitely interesting!

GitHub Actions: Remove offline self-hosted runners
GitHub Actions: Remove offline self-hosted runners

GitHub Actions: runner images repository refresh
GitHub Actions: runner images repository refresh

Anybody knows how to get workflow_dispatch inputs for a run via the GH api?

Like a workflow is triggered somewhere via the api with inputs/parameters, and now I want to get the currently running workflows and the inputs.

GitHub Actions: Self-hosted runners now support Apple M1 hardware
GitHub Actions: Self-hosted runners now support Apple M1 hardware

GitHub Actions: The Ubuntu 18.04 Actions runner image is being deprecated and will be removed by 12/1/22
GitHub Actions: The Ubuntu 18.04 Actions runner image is being deprecated and will be removed by 12/1/22

GitHub Actions: Ubuntu 22.04 is now generally available on GitHub-hosted runners
GitHub Actions: Ubuntu 22.04 is now generally available on GitHub-hosted runners

GitHub Pages: Builds with GitHub Actions GA
GitHub Pages: Builds with GitHub Actions GA

https://twitter.com/sheldon_hull/status/1559605904743583744
Anyone know an answer to this? I'm just jumping back in actions, and the lack of being able to setup a object at the top feels odd.

basically in azure pipelines

parameters:
- name: builds
  type: object
  default:
  - version1
  - version2
  - version3

then you could use it later in templating approach with things like this. It provided an object/list.
Only example I've found involves arg splitting via cli, which feels pretty hacky.

Note: This is NOT a matrix build, which I know is supported. Instead it's an object list not a string list that can be used to iterate or loop through.

- template: templates/install-version.yml@templates
   parameters:
       builds: ${{ parameters.builds }}

Is this where the power of Azure pipelines just shows it's robustness over the github actions features that don't have such rich templating features?

Merge group webhook event and GitHub Actions workflow trigger
Merge group webhook event and GitHub Actions workflow trigger

GitHub Actions: Improvements to reusable workflows
GitHub Actions: Improvements to reusable workflows

GitHub Actions: Improvements to reusable workflows
GitHub Actions: Improvements to reusable workflows

GitHub Actions: Enhancements to OpenID Connect support to enable secure cloud deployments at scale
GitHub Actions: Enhancements to OpenID Connect support to enable secure cloud deployments at scale

Blowing steam here about some stuff that people do in CI/CD! Can't hold it anymore!
Here is one of mine: npm install instead of npm ci 🤦‍♂️

Join me and blow your steam too 😤