Topic
builds
2 articles and 0 notes on builds.
Newest firstArticles RSS
Pinned to a release that already had the fix
SHA-pinning a shared GitHub Actions workflow locks out regressions and locks in bugs the maintainer has already fixed, because nothing tells a consumer a newer pin exists.
Retiring long-lived GitHub PATs for a per-job mint
Replacing standing GitHub PATs across three orgs with GitHub OIDC brokered through OpenBao into hour-lived App installation tokens, and the traps that arrangement produced.