GHES の GitHub Actions で Google Cloud との OIDC 連携がしやすくなりました
みなさん GitHub Actions の OpenID Connect (以下OIDC) 連携使っていますか？ GitHub Actions はワークフローの中で OIDC の ID トークンを発行でき，これを Google Cloud などのクラウドプロバイダの認証に用いることでサービスアカウントのクレデンシャルを発行することなくクラウドプロバイダのリソースをワークフロー内で操作できるようになります．これによりクレデンシャルのローテーションなどの管理コストが減り，よりセキュアな連携が可能になります． 詳しくは GitHub の公式ドキュメントや解説記事を見ていただけると良いと思います． 基本的に良いことづくめな OIDC 連携ですが，GitHub Enterprise Server (オンプレ版 GitHub．以下GHES) では OIDC 連携が難しいケースがあります．OIDC 連携
GitHubのリリースノートを自動化する仕組み
GitHub のAutomatically generated release notesを使ってリリースノートの内容を PR に基づいて自動生成するフローを作りました。 今までは、コミットメッセージのルールであるConventional Commitsとconventional-github-releaserを使って、コミットからリリースノートを自動生成していました。 他の人の PR でも、squah merge でコミットメッセージを書き換えることで、リリースノートに反映されるようにしていました。 ただ GitHub に仕組みは違うけどほぼ似たことをするAutomatically generated release notesという機能が実装されているので、これをベースに移行しようと思って、そのワークフローを作っていました。 リリースノート自動生成テクニック - mizdra’s bl
GitHub Next | Copilot for CLI
The terminal is a powerful place: In a single line of arcane shell magic, you can transform files and parse data at will. But it can take many years of regular use to become a shell wizard. Even with solid proficiency, most of us regularly need to optimistically type --help or scroll through man pages. Oftentimes, you simply turn to a web search, hopefully finding something like a relevant StackOv
Sign your Git commits with 1Password | 1Password
So 1Password CEO Jeff Shiner just committed code to one of my GitHub repositories. That’s strange. While he’s a developer at heart, I don’t think he gets much time to code these days. What’s going on here? As you might have guessed, this didn’t actually come from Jeff Shiner. In fact, anyone can spoof a Git committer or author name with just a few terminal commands and pretend to be someone else:
GitHub Copilot investigation · Joseph Saveri Law Firm & Matthew Butterick
Maybe you don’t mind if GitHub Copilot used your open-source code without asking. But how will you feel if Copilot erases your open-source community?Hello. This is Matthew Butterick. I’m a writer, designer, programmer, and lawyer. I’ve written two books on typography—Practical Typography and Typography for Lawyers—and designed the fonts in the MB Type library, including Equity,
GitHub Actions Larger runners - Are now in public beta
September 1, 2022 Today, we are announcing the public beta of larger GitHub hosted runners for GitHub Actions for Team and Enterprise plans 🎉 🎉 The new larger runners provide new capabilities for Team and Enterprise GitHub Action users: Linux and Windows machines up to 64 cores Fixed IP ranges to provide access to runners via allow list services Admin control over access to larger runners and co
Improved innersource collaboration and enterprise fork policies
Improved innersource collaboration and enterprise fork policies enterpriseforksinnersourceinternalorganizationspoliciesrepositories June 27, 2022 Previously, three aspects of repository forks caused friction to innersource collaboration and administration: Repositories could not be forked within a single organization. Repositories with internal visibility could not be forked to an organization. En
GitHub Copilot is generally available to all developers
ProductGitHub Copilot is generally available to all developersWe’re making GitHub Copilot, an AI pair programmer that suggests code in your editor, generally available to all developers for $10 USD/month or $100 USD/year. It will also be free to use for verified students and maintainers of popular open source projects. At GitHub, it’s part of our mission to build technology that makes developers h
The new GitHub Issues - May 19th update
May 19, 2022 Today's Changelog brings you the release of issue closed reasons, project deletion, and availability of the new side-panel. 🕵🏽♀️ Issue closed reasons We announced a preview of issue closed reasons in March and today, we're releasing them to everyone. 🎉 Issue closed reasons help you communicate the why when closing an issue: When closing, you can opt to close as complete (default o
Improved REST API documentation
ProductImproved REST API documentationWe’re excited to announce some big improvements to our REST API documentation. We know developers rely on this documentation to integrate with GitHub, and we are committed to making it trustworthy, easy to find, and easy to use. We’re excited to announce some big improvements to our REST API documentation. We know developers rely on this documentation to integ
GitHub Actions入門 ── ワークフローの基本的な構造からOIDCによる外部サービス認証まで - エンジニアHub｜Webエンジニアのキャリアを考える！
GitHub Achieves ISO/IEC 27001:2013 Certification!
EnterpriseSecurityGitHub Achieves ISO/IEC 27001:2013 Certification!GitHub’s Information Security Management System (ISMS) has been certified against ISO 27001:2013, an internationally recognized standard for security program best practices. GitHub continues to invest in security and compliance as part of our ongoing effort to be the trusted home for all developers. Today we’re excited to announce
How to secure your end-to-end supply chain on GitHub
ProductSecurityHow to secure your end-to-end supply chain on GitHubSecuring your projects is no easy task, but end-to-end supply chain security is more top of mind than ever. We've seen bad actors expand their focus to taking over user… Securing your projects is no easy task, but end-to-end supply chain security is more top of mind than ever. We’ve seen bad actors expand their focus to taking over
Ignore commits in the blame view (Beta)
March 24, 2022 It's now possible to ignore revisions in the blame view using a .git-blame-ignore-revs file in the root of your repository. For more information, see "Ignore commits in the blame view". You can now follow organizations just like you can already follow users and keep up to date with the latest activity related to the organizations you follow in the new "For you" feed. Following organ
Improving your GitHub feed
CommunityOpen SourceImproving your GitHub feedToday, we are rolling out a new beta version of GitHub’s home feed, making it easier to discover projects, developers and more across GitHub. We’re excited to introduce a new beta version of GitHub’s home feed on your dashboard, designed to help developers build community, find inspiration, and celebrate each other’s incredible work. We want to help yo
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
GitHub Blocks
GitHub - github/gh-valet: Valet helps facilitate the migration of Azure DevOps, CircleCI, GitLab CI, Jenkins, and Travis CI pipelines to GitHub Actions.
GitHub - test-summary/action: Show a helpful summary of test results in GitHub Actions CI/CD workflow runs
Release Add caching support on GHES 3.5 · actions/setup-node
Introducing the GHES repository cache