#github-actions - June 2023

GitHub Actions – Just-in-time self-hosted runners
GitHub Actions - Just-in-time self-hosted runners

GitHub Actions: You can now disable repo level self-hosted runners in an Enterprise and Organization
GitHub Actions: You can now disable repo level self-hosted runners in an Enterprise and Organization

GitHub Actions: All Actions will run on Node16 instead of Node12 by default
GitHub Actions: All Actions will run on Node16 instead of Node12 by default

Fix to improve security around creation of pull requests in public repos
Fix to improve security around creation of pull requests in public repos

GitHub Actions – Securing OpenID Connect (OIDC) token permissions in reusable workflows
For securely enabling OpenID Connect (OIDC) in your reusable workflows, we are now making the permissions more restrictive. If you need to fetch an OIDC token generated within a reusable (called) workflow that is outside your enterprise/organization, then the permissions setting for id-token should now be explicitly set to write at the caller workflow level […]

Speaking of GHA and OIDC, does anyone know how can I filter CloudTrail for events coming from OIDC?

GitHub-hosted larger runners for Actions are generally available
GitHub-hosted larger runners for Actions are generally available

Hi, does anyone know any way to detect stale / hung job and kill it? Something that implements idle timeout as opposed to regular "dumb" timeout

GitHub Actions – Update on OIDC integration with AWS
We have received customers reporting errors with Actions’ OIDC integration with AWS. This happens for customers who are pinned to a single intermediary thumbprint from the Certificate Authority (CA) of the Actions SSL certificate. There are two possible intermediary certificates for the Actions SSL certificate and either can be returned by our servers, requiring customers […]

GitHub Actions – Actions Runner General availability
GitHub Actions - Actions Runner General availability