arm64 standard runners are now available in private repositories - GitHub Changelog
arm64 standard runners are now available in private repositories Linux and Windows arm64 standard GitHub-hosted runners are now supported in private repositories. You can now use these free-tier eligible arm64 runners in all repositories, letting you take advantage of the performance benefits of arm64 processors and run native multi-architecture builds without the overhead of virtualization or emu
Actions pull_request_target and environment branch protections changes - GitHub Changelog
Actions pull_request_target and environment branch protections changes GitHub is updating how GitHub Actions’ pull_request_target and environment branch protection rules are evaluated for pull-request-related events. These changes will take effect on 12/8/2025. They aim to reduce security critical edge cases in how these events operate on user-controlled branches that may result in unexpected exec
Pricing changes for GitHub Actions
TLDR: We’re postponing the announced billing change for self-hosted GitHub Actions to take time to re-evaluate our approach. We are continuing to reduce hosted-runners prices by up to 39% on January 1, 2026. We’ve read your posts and heard your feedback. We’re postponing the announced billing change for self-hosted GitHub Actions to take time to re-evaluate our approach. We are continuing to reduc
GitHub Actions cache size can now exceed 10 GB per repository - GitHub Changelog
Menu. Currently selected: GitHub Actions cache size can now exceed 10 GB per repository GitHub Actions cache size can now exceed 10 GB per repository You can now store more build dependencies between workflow runs with expanded GitHub Actions cache storage. Repositories can go beyond the previous 10 GB per-repository cache cap using a pay-as-you-go model. All repositories will continue to receive
GitHub Actionsã§ESLintã®Shardingを実装ã—ã¦ã€CIã®å®Ÿè¡Œæ™‚é–“ã‚’51%削減ã—ã¾ã—㟠- newmo 技術ブãƒã‚°
newmoã§ã¯ã€pnpm workspaceã§ç®¡ç†ã—ã¦ã„る複数ã®ã‚¢ãƒ—リケーションやライブラリã«å¯¾ã—ã¦ESLintを実行ã—ã¦ã„ã¾ã™ã€‚ プãƒã‚¸ã‚§ã‚¯ãƒˆã®æˆé•·ã¨ã¨ã‚‚ã«Lint対象ã®ãƒ•ã‚¡ã‚¤ãƒ«æ•°ãŒå¢—åŠ ã—ã€CI実行時間ã¨ãƒ¡ãƒ¢ãƒªä½¿ç”¨é‡ãŒå¢—åŠ ã—ã¦ã„ã¾ã—ãŸã€‚GitHub Actionsã®matrixオプションを使用ã—ãŸå‹•çš„ãªShardingを実装ã—ã€ã“れらã®å•é¡Œã«å¯¾å¿œã—ã¾ã—ãŸã€‚ newmoフãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã®é–‹ç™ºåŽŸå‰‡ newmoã®ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰é–‹ç™ºã§ã¯ã€æ¬¡ã®åŽŸå‰‡ã‚’é‡è¦–ã—ã¦ã„ã¾ã™ã€‚ 1ã¤ç›®ã¯ã€ã€ŒåŒã˜ç›®çš„ã‚’é”æˆã™ã‚‹ãŸã‚ã®æ‰‹æ®µã‚’統一ã™ã‚‹ã€ã¨ã„ã†åŽŸå‰‡ã§ã™ã€‚åŒã˜ç›®çš„ã«å¯¾ã™ã‚‹è¤‡æ•°ã®æ‰‹æ®µãŒæ··åœ¨ã™ã‚‹ã‚ˆã‚Šã‚‚ã€çµ±ä¸€ã—ãŸæ‰‹æ®µã‚’使ã†ã“ã¨ã§å¦ç¿’コストやä¿å®ˆã‚³ã‚¹ãƒˆã‚’削減ã§ãã¾ã™ã€‚例ãˆã°ã€npmパッケージã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ç®¡ç†ã§ã¯ã€One Version Ruleã«åŸºã¥ãã€åŒã˜ç›®çš„ã‚’æŒã¤ãƒ©ã‚¤ãƒ–ラリã¯1ã¤ã«çµžã£ã¦ã„ã¾ã™ã€‚ã“ã‚Œã¯ã€ŒåŒã˜ã‚³ãƒ¼ãƒ‰ã‚’書ã‹ãªã„ã€
New date for enforcement of cache eviction policy - GitHub Changelog
We’re delaying the enforcement of a new cache eviction policy for GitHub Actions from mid-October to November. Currently, each repository has a maximum cache size of 10 GB, and we evict the oldest cache entries every 24 hours to keep usage below this limit. We’re changing the eviction interval to every hour. If your repositories use more than 10 GB of cache in a 24-hour period, you have received a
GitHub Actions ã®ä¾å˜é–¢ä¿‚ã‚’å†å¸°çš„ã«å‡ºåŠ›ã™ã‚‹ã€Œghatreeã€ã®ç´¹ä»‹
{ "type": "repository", "dependencies": [ { "type": "workflow", "path": ".github/workflows/example1.yml", "dependencies": [ { "type": "job", "path": "job1", "dependencies": [ { "type": "action", "repository": { "owner": "actions", "name": "checkout" }, "ref": "v5", "dependencies": [] }, { "type": "action", "repository": { "owner": "actions", "name": "setup-node" }, "ref": "v4", "dependencies": []
GitHub Actions policy now supports blocking and SHA pinning actions - GitHub Changelog
GitHub Actions policy now supports blocking and SHA pinning actions GitHub Actions is powered by a diverse ecosystem of first-party and community contributed actions. If one of these actions has a vulnerability or is compromised by a malicious actor, it can impact all of its dependents in the supply chain. Tools like Dependabot can identify and upgrade actions versions with known vulnerabilities t
GitHub Actionsã§ãƒ†ã‚¹ãƒˆã‚«ãƒãƒ¬ãƒƒã‚¸ã®å¢—減をå¯è¦–化ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šãƒ›ãƒ¼ã‚½ãƒ³åŠ¹æžœã‚’狙ㆠ- ç†ç³»å¦ç”Ÿæ—¥è¨˜
ã¾ãよãやられã¦ã„る話ãªã‚“ã ã‘ã©ã€‚ è‡ªå‹•ãƒ†ã‚¹ãƒˆé ‘å¼µã‚Šã¾ã—ょã†ã¿ãŸã„ãªè©±ã‚’ã—ã¦ã‚‚ã€å¤§ä½“ãã†ã§ã™ãã§çµ‚ã‚る。ã“ã‚Œã«ã¯è‰²ã€…ç†ç”±ã‚‚ã‚ã£ã¦ã€3分ãらã„考ãˆã¦ã‚‚ テスト書ã時間ãŒã‚ã£ãŸã‚‰ã¾ãšã¯ãƒ—ãƒãƒ€ã‚¯ã‚·ãƒ§ãƒ³ã‚³ãƒ¼ãƒ‰ã®å®Ÿè£…を終ã‚らã›ã‚ã‚„ã€ãã†ã˜ã‚ƒãªã„ã¨ãƒªãƒªãƒ¼ã‚¹é…延ã™ã‚‹ã ã‚ã†ãŒã¿ãŸã„ã«æ€’られる 長期的ã¯ãƒªã‚°ãƒ¬ãƒƒã‚·ãƒ§ãƒ³ãƒ†ã‚¹ãƒˆãŒæ¥½ã«ãªã‚‹ã‚ˆã€ã‚¢ã‚¸ãƒªãƒ†ã‚£ãŒé«˜ã¾ã‚‹ã‚ˆã£ã¦ã‚ã‹ã£ã¦ã„ã¦ã‚‚ã€ç‰¹ã«æ–°è¦é–‹ç™ºã¨ã‹ã§ä»•æ§˜ãŒè‰²ã€…変ã‚ã‚‹ä¸ã§ãƒ†ã‚¹ãƒˆã‚³ãƒ¼ãƒ‰ã®ãƒ¡ãƒ³ãƒ†ãŒè² 債ã«ãªã‚‹ ãã‚‚ãもメンテナブルãªãƒ†ã‚¹ãƒˆã‚³ãƒ¼ãƒ‰ã‚’書ãã®ãŒå¤§å¤‰ ã¿ãŸã„ãªè©±ã«ãªã‚‹ã€‚ ãã‚Œã¯ãã‚Œã§æ ¹æ·±ã„å•é¡Œãªã‚“ã ã‘ã©ã€é ç—›ããªã‚‹ã—è¾›ããªã‚‹ã‹ã‚‰ãã†ã„ã†é›£ã—ã„話ã¯ã‚„ã‚ãŸã„。人生ã¯æ¥½ã—ã‚€ã¹ãã§ã‚ã£ã¦ã€é ç—›ããªã‚‹ãŸã‚ã«ç”Ÿãã¦ã„ã‚‹ã®ã§ã¯ãªã„。何もã—ã¦ãªã„ã®ã«ãã‚‚ãã‚‚é ç—›ã„ã—。 最近ã€ã€Œã‚ãªãŸã®ãƒ—ルリクエストã§ãƒ†ã‚¹ãƒˆã‚«ãƒãƒ¬ãƒƒã‚¸ãŒã©ã‚Œã ã‘増減ã—ãŸã‚“ã§ã™ã‹ã€ã¨ã„ã†ã®ã‚’ç„¡æ¡ä»¶ã§ã‚³ãƒ¡ãƒ³ãƒˆæŠ•ç¨¿ã—ã¦ã‚„
GitHubã®Issueã‚„PRã®ãƒã‚§ãƒƒã‚¯ãƒœãƒƒã‚¯ã‚¹ã§ãƒ¯ãƒ¼ã‚¯ãƒ•ãƒãƒ¼ã‚’制御ã™ã‚‹JavaScriptアクションを作ã£ãŸ
ã¯ã˜ã‚ã«# GitHub ã® Issue ã‚„ Pull Request (PR) ã«å«ã¾ã‚Œã‚‹ãƒã‚§ãƒƒã‚¯ãƒœãƒƒã‚¯ã‚¹ã®çŠ¶æ…‹ã«å¿œã˜ã¦ã€ãƒ¯ãƒ¼ã‚¯ãƒ•ãƒãƒ¼ã‚’制御ã§ãã‚‹ GitHub Actions ã® checkbox-workflow-action を作りã¾ã—ãŸã€‚ ã“ã® Action を使ã†ã“ã¨ã§ã€ä¾‹ãˆã°ä»¥ä¸‹ã®ã‚ˆã†ãªåˆ¶å¾¡ãŒå¯èƒ½ã§ã™ã€‚ PR 内ã®ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆãŒã™ã¹ã¦ãƒã‚§ãƒƒã‚¯ã•ã‚ŒãŸã‚‰ã€è‡ªå‹•çš„ã« Draft 解除ã—ã¦é©å½“㪠Reviewer を割り当㦠複数ãƒãƒ¼ãƒ ã®æ‰¿èªãƒã‚§ãƒƒã‚¯ãƒœãƒƒã‚¯ã‚¹ãŒã™ã¹ã¦å®Œäº†ã—ãŸã‚‰ã€æ¬¡ã®ã‚¹ãƒ†ãƒƒãƒ—ã¸é€²ã‚€ Issue ã®ã‚¿ã‚¹ã‚¯é€²æ—ã«å¿œã˜ã¦ã€ãƒ©ãƒ™ãƒ«ã‚’自動的ã«æ›´æ–° etc... 活用ã®å¹…ã¯ãã‚Œãªã‚Šã«åºƒã„ã¨è€ƒãˆã¦ã„ã¾ã™ãŒã€ä¸Šè¨˜ã«ä¾‹ç¤ºã—ãŸã‚‚ã®ã‚ˆã‚Šæœ‰åŠ¹ãªæ´»ç”¨ã«ã¤ã„ã¦ã¯ã“ã‚Œã‹ã‚‰æ¤œè¨Žã—ã¦ã„ããŸã„ã§ã™ã€‚以é™ã€ãªãœ checkbox-workflow-action ã®ä½œæˆã«è‡³ã£ãŸã®ã‹ã€ã–ã£ãã‚Šã¨ã—ãŸãƒ„ールã®æ¦‚
リãƒã‚¸ãƒˆãƒªã®å†…容を別リãƒã‚¸ãƒˆãƒªã«pushã™ã‚‹GitHub Actionを公開ã—㟠| ãŠãらãã¯ãã‚Œã•ãˆã‚‚平凡ãªæ—¥ã€…
ã‚るリãƒã‚¸ãƒˆãƒªã®ä¸€éƒ¨ã¾ãŸã¯å…¨éƒ¨ã‚’別リãƒã‚¸ãƒˆãƒªã®ãƒ«ãƒ¼ãƒˆãªã‚Šã‚µãƒ–ディレクトリã«pushã—ãŸããªã‚‹ã“ã¨ãŒãŸã¾ã«ã‚る。一般的ã«ã‚‚ニーズãŒã‚ã‚Šãã†ã ãŒã€ã¡ã‚ƒã‚“ã¨ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã•ã‚Œã¦ã„るモノãŒè¦‹å½“ãŸã‚‰ãªã‹ã£ãŸã®ã§ã€ä»¥ä¸‹ã«å…¬é–‹ã—ãŸã€‚ã‹ãªã‚Šä¾¿åˆ©ã€‚ https://github.com/Songmu/action-push-to-another-repository https://github.com/marketplace/actions/songmu-action-push-to-another-repository ã“ã‚Œã¯ã‚¤ãƒã‹ã‚‰ä½œã£ãŸã‚ã‘ã§ã¯ãªãã€cpina/github-action-push-to-another-repository ã‚’forkã—ãŸã‚‚ã®ã§ã™ã€‚ã“ã®forkå…ƒã¯ã€ç§ã‚‚使ã£ã¦ã„ãŸã®ã§ã™ãŒã€ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹åœæ¢ãŒå®£è¨€ã•ã‚Œã¦ãŠã‚Šã€signed commit対応ãªã©ã‚‚ã•ã‚Œãªã•ãã†ãªã®ã§æ–°ãŸã«é–‹
GitHub - bahdotsh/wrkflw: Validate and Run GitHub Actions locally.
TUI Interface: A full-featured terminal user interface for managing and monitoring workflow executions Validate Workflow Files: Check for syntax errors and common mistakes in GitHub Actions workflow files with proper exit codes for CI/CD integration Execute Workflows Locally: Run workflows directly on your machine using Docker or Podman containers Multiple Container Runtimes: Support for Docker, P
GitHub Actions token integration now generally available in GitHub Models - GitHub Changelog
GitHub Actions token integration now generally available in GitHub Models You can now use the built-in GITHUB_TOKEN from GitHub Actions to authenticate requests to GitHub Models. This simplifies your workflows by integrating AI capabilities directly into your actions, eliminating the need to generate and manage Personal Access Tokens (PATs). With this update, creating and sharing AI-driven GitHub
GitHub Action supply chain attack exposed secrets in 218 repos
HomeNewsSecurityGitHub Action supply chain attack exposed secrets in 218 repos The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it, with it estimated that only 218 repositories exposed secrets due to the supply chain attack. Despite the small number, the potential security repercussions are still significant as some reposito
ランã‚ング
ランã‚ング
メンテナンス
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Towards a secure by default GitHub Actions · community · Discussion #179107
Release v6.0.0 · actions/setup-node
GitHub - danielroe/provenance-action: Fail CI when dependencies in your lockfile lose npm provenance or trusted publisher status
GitHub - Finatext/gha-fix: Automates security and maintenance fixes in GitHub Actions workflows
GitHub - actions/ai-inference: An action for calling AI models with GitHub Models
GitHub - mheap/pin-github-action: Pin your GitHub actions to a specific hash
{{#tags}}- {{label}}
{{/tags}}