#CI #github il est désormais possible d'utiliser des versions "free-threaded" de #Python (sans le global interpreter lock, qui bride la façon de faire de l'exécution concurrente) dans les #githubactions
https://hugovk.dev/blog/2025/free-threaded-python-on-github-actions/
Nous avons tous nos bonnes pratiques lorsqu'il s'agit de créer un nouveau #projet #Python, avec l'utilisation de patterns et d'outils éprouvés : lint avec #ruff et #mypy, hooks avec #precommit, tests avec #pytest, intégration continue #githubactions : https://github.com/neubig/starter-repo
Libre à chaque personne de faire évoluer le porojet selon ses propres goûts et contraintes.
This Week in Security: The Github Supply Chain Attack, Ransomware Decryption, and Paragon - Last Friday Github saw a supply chain attack hidden in a popular Github Action. To... - https://hackaday.com/2025/03/21/this-week-in-security-the-github-supply-chain-attack-ransomware-decryption-and-paragon/ #thisweekinsecurity #supplychainattack #hackadaycolumns #securityhacks #githubactions #paragon #news
Cascading Supply Chain Attack Exposes Secrets in Over 23,000 GitHub Repositories
A recent supply chain attack has compromised critical CI/CD secrets across a staggering number of GitHub repositories, revealing vulnerabilities in widely used actions. The breach highlights the inter...
Cascading Supply Chain Attack Exposes CI/CD Secrets: A GitHub Action Breach Analysis
A recent cascading supply chain attack has compromised GitHub Actions, leading to the exposure of CI/CD secrets across thousands of repositories. This incident highlights vulnerabilities in the softwa...
Windows Server 2025 Set to Revolutionize DevOps with New Features in GitHub Actions and Azure DevOps
The upcoming release of Windows Server 2025, scheduled for general availability on April 1, 2025, promises significant enhancements for developers using GitHub Actions and Azure DevOps. With updated s...
TIL: pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows.
https://github.com/suzuki-shunsuke/pinact
#GitHub #GitHubActions #TIL
"Another wakeup call:" A #softwaresupplychain attack on a widely used GitHub Actions repository renews experts' calls for better #buildpipeline security. #CICD #softwaresupplychainsecurity #GitHubActions https://www.techtarget.com/searchitoperations/news/366621078/GitHub-Actions-supply-chain-attack-spotlights-CI-CD-risks
GitHub Action Supply Chain Attack: A Wake-Up Call for CI/CD Security
A recent supply chain attack on the popular 'tj-actions/changed-files' GitHub Action has exposed critical CI/CD secrets, affecting over 23,000 repositories. This incident underscores the vulnerabiliti...
https://news.lavx.hu/article/github-action-supply-chain-attack-a-wake-up-call-for-ci-cd-security
Securing GitHub Actions: The Case for SHA Pinning in Supply Chain Security
The recent compromise of tj-actions/changed-files underscores the importance of supply chain security in software development. By implementing SHA pinning and utilizing automation tools, developers ca...
Critical Security Flaw Uncovered in Popular GitHub Action: tj-actions/changed-files
The tj-actions/changed-files GitHub Action has been compromised, posing a significant threat to CI pipelines across thousands of projects. With all versions affected, developers must act swiftly to sa...
Revolutionizing Website Monitoring with Upptime: GitHub Actions Meets Svelte
In an era where uptime is paramount, Upptime offers a seamless solution for monitoring website performance using GitHub Actions. This innovative tool not only tracks response times but also provides a...
Secure Quarkus Java Applications with GitHub Actions & Apps https://open.substack.com/pub/myfear/p/secure-quarkus-java-applications
#Java #Quarkus #Security #githubactions
Automate Your Documentation Translations with Yuki-no GitHub Action
Yuki-no is a powerful GitHub Action designed to streamline documentation translation projects by automating issue creation based on repository commits. This innovative tool is gaining traction among d...
https://news.lavx.hu/article/automate-your-documentation-translations-with-yuki-no-github-action
Check out my recent post on building Nix systems with GitHub Actions and Cachix! https://ethancedwards.com/blog/building-nix-with-gha .
GitHub's Support for OpenDAL: A Seamless Transition to the New Cache Service
In a collaborative effort, GitHub has reached out to OpenDAL to aid in the migration to its new GitHub Actions Cache Service. This partnership highlights the importance of API versioning and user iden...
@cafkafk call my CI checks the Soviet Block the way they're red and you're isolated and crying 
(<- KGB agent, btw)
Spoke too soon about InfoSec projects still clinging to Python 2.7. Turns out my ronin-payloads project, a Ruby project, requires the python2 package in order to test it's Python Payload Encoders under Python versions 2 and 3.
https://github.com/ronin-rb/ronin-payloads/blob/1ae19ec2c3ae0a244b02d4a8cfc7d638c2414743/spec/encoders/builtin/python/base64_encode_spec.rb#L25-L31
Appears that GitHub has recently updated their GitHub Actions Ubuntu VM to 24.04.1, which no longer has a python2 package :(
https://github.com/ronin-rb/ronin-payloads/actions/runs/13234890368/job/36937936068
Also looks like the setup-python GitHub Action has also already removed python2.7.
https://github.com/actions/setup-python/issues/672
This poses a bit of a problem for software which needs to test against other legacy software.
arc) 