Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub Agentic Workflows

github.github.io

Post reply on HN
Print view View original

11–20 of 149 posts

Re: GitHub Agentic Workflows

#12

Post by eddythompson80 »

lemonlime227 wrote: post #6

Alternative, less phishy link: https://github.com/github/gh-aw This is on GitHub's official account. For some reason GitHub is deploying this on GitHub pages without a different domain?

Why would that be phishy? They own the GitHub org on GitHub, hence github.github.io. I always thought it was a neat recursive/dogfood type thing even if not really that deep. Like when Reddit had /r/reddit.com or twitter having @twitter

Re: GitHub Agentic Workflows

#13

Post by embedding-shape »

eddythompson80 wrote: post #12
lemonlime227 wrote: post #6

Alternative, less phishy link: https://github.com/github/gh-aw This is on GitHub's official account. For some reason GitHub is deploying this on GitHub pages without a different domain?

Why would that be phishy? They own the GitHub org on GitHub, hence github.github.io. I always thought it was a neat recursive/dogfood type thing even if not really that deep. Like when Reddit had /r/reddit.com or twitter having @twitter

When they launched github.io, they said it was for user-generated content, and official stuff will be on github.com. Seemingly that's changed/they forgot, but users seems to have remembered. Microsoft isn't famous for their consistency, so not unexpected exactly.

Re: GitHub Agentic Workflows

#14

Post by hmokiguess »

lemonlime227 wrote: post #6

Alternative, less phishy link: https://github.com/github/gh-aw This is on GitHub's official account. For some reason GitHub is deploying this on GitHub pages without a different domain?

So them using their own product makes it phishy? I don’t get it

It’s not like someone else can or could own this link, could they?

Re: GitHub Agentic Workflows

#17

Post by eddythompson80 »

embedding-shape wrote: post #13
eddythompson80 wrote: post #12

Earlier quoted context omitted.

Why would that be phishy? They own the GitHub org on GitHub, hence github.github.io. I always thought it was a neat recursive/dogfood type thing even if not really that deep. Like when Reddit had /r/reddit.com or twitter having @twitter

When they launched github.io, they said it was for user-generated content, and official stuff will be on github.com. Seemingly that's changed/they forgot, but users seems to have remembered. Microsoft isn't famous for their consistency, so not unexpected exactly.

I’m pretty sure they have used it before, or maybe it was githubnext. I’m also pretty sure I have seen many large companies and organizations launch developer facing tools and stuff through GitHub pages. The structure of GitHub pages is pretty simple. You know the user/org from the domain. I’m still not sure what’s phishy about it. Is it a broken promise?

Re: GitHub Agentic Workflows

#19

Post by acedTrex »

clarkdale wrote: post #10

I feel like this solution hallucinated the concept of Workflow Lock File (.lock.yml), which is not available in Github Actions. This is a missing feature that would solve the security risk of changing git tag references when calling to actions like utility@v1

You can already hardcode the sha of a given workflow in the ref, and arguably should do that anyways.
Post reply on HN