Live data from Hacker News

GitHub Actions has a package manager, and it might be the worst

nesbitt.io

181–190 of 267 posts

Re: GitHub Actions has a package manager, and it might be the worst

#181
post #21

Earlier quoted context omitted.

https://github.com/orgs/actions/repositories?language=&q=&so... https://github.com/actions/create-release

The funny thing about the last one is that those actions ultimately boil down to invoking their CLI tool (which is pre-installed on the runners) with "gh release create ...", so you can just do that yourself and ignore the third-party actions and the issues that come with them. Invoking an action isn't really any easier than invoking the CLI tool.

Yeah, what really needs to happen with that repo is to put that in the README to use the gh CLI instead of pointing to the third-party action with questionable security policies. If they were accepting PRs for that repo, it would be an easy PR to make.

Re: GitHub Actions has a package manager, and it might be the worst

#182

Earlier quoted context omitted.

Yeah, but I have to set that up. GitHub actions more or less just work for what most people need. If you have a complex setup, use a real CI/CD system.

Such as?

Jenkins is open source and very well documented.

GitHub Actions are really for just short scripts. Don't take your Miata off road.

Re: GitHub Actions has a package manager, and it might be the worst

#183

Earlier quoted context omitted.

GP is saying that GHA would need zero information about AWS if CodeBuild used a Github token and listened for GHA runs.

That may be true, but it's not what the link describes.

Fair!

Re: GitHub Actions has a package manager, and it might be the worst

#184

Earlier quoted context omitted.

There is a massive problem in open source where some people equate pointing out a problem with being too lazy to solve it — when in reality this just stifles the conversation. Especially when a prerequisite to any group project accomplishing anything is to first discuss the problem to be solved.

No that's actually a completely different issue. You're talking about volunteers working on side projects that are sometimes foundational to the way the internet works and then people feel entitled to tell them what to do without contributing. Here we are talking about one of the worlds most valuable companies that gets all sorts of perks, benefits and preferential treatment from various entities and governments on t…

No, that's actually the same issue. "Entitled to tell them what to do without contributing" is not a problem. Let them tell whoever what to do, the response is always the same: "patches welcome," or if that isn't even true (which it doesn't have to be), "feel free to fork."

Re: GitHub Actions has a package manager, and it might be the worst

#185

A lot of the actions people tend to use are just unnecessary. They're simple wrappers around real tools. In those cases, use mise-en-place. It's a single action that installs all relevant tools (and keeps your local dev env in check), and it supports lock files.

This right here - I am migrating all of our GHA to use the mise action. Makes keeping the version of Go, linters, formatters etc. for the project so much easier. Haven't added the mise.lock yet, but on the list. Now getting my small team of devs to try using mise is much harder.

Re: GitHub Actions has a package manager, and it might be the worst

#186
post #16

Earlier quoted context omitted.

I was surprised to learn that Depot runners, which are much faster, are also much cheaper. Would highly recommend them for anyone trapped on GitHub.

Depot.dev is great.

Thank you! Really appreciate the support.

Re: GitHub Actions has a package manager, and it might be the worst

#187
post #16

Earlier quoted context omitted.

I was surprised to learn that Depot runners, which are much faster, are also much cheaper. Would highly recommend them for anyone trapped on GitHub.

What are Depot runners?

Founder of Depot here. We provide faster and more reliable GitHub Actions runners (as well as other build performance services) at half the cost of GitHub [0]

[0] https://depot.dev/

Re: GitHub Actions has a package manager, and it might be the worst

#188

Earlier quoted context omitted.

No that's actually a completely different issue. You're talking about volunteers working on side projects that are sometimes foundational to the way the internet works and then people feel entitled to tell them what to do without contributing. Here we are talking about one of the worlds most valuable companies that gets all sorts of perks, benefits and preferential treatment from various entities and governments on t…

No, that's actually the same issue. "Entitled to tell them what to do without contributing" is not a problem. Let them tell whoever what to do, the response is always the same: "patches welcome," or if that isn't even true (which it doesn't have to be), "feel free to fork."

OTOH if you didn't pay for support you shouldn't expect support. 'patches welcome' is a very valid response.

Re: GitHub Actions has a package manager, and it might be the worst

#189
GitHub has been showing its limitations for quite some time now, and this gives a chance to alternative code forges to rise to prominence.

I hope that Codeberg will become more mainstream for FOSS projects.

I hope another competent player, beside GitLab and Bitbucket, will emerge in the corporate paid space.

Re: GitHub Actions has a package manager, and it might be the worst

#190

Earlier quoted context omitted.

Such as?

Jenkins is open source and very well documented. GitHub Actions are really for just short scripts. Don't take your Miata off road.

Jenkins! For the love of god don’t listen to this.
Post reply on HN