Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub appears to be struggling with measly three nines availability

theregister.com

Post reply on HN
Print view View original

91–100 of 255 posts

Re: GitHub appears to be struggling with measly three nines availability

#91

Post by astralasia »

sauercrowd wrote: post #82

I'm somewhat surprised with Github's strategy in the AI times. I understand how appealing it is to build an AI coding agent and all that, but shouldn't they - above everything else - make sure they remain THE platform for code distribution, collaboration and alike? And it doesnt need to be humans, that can be agents as well. They should serve the AI agent world first and foremost. Cause if they dont pull that off, an…

Microsoft’s real goal is selling Copilot seats and pushing Azure, not building a neutral playground for third-party agents. There is just no money for them in being the backend for someone else's AI. As for the AI spam, GitHub's internal metrics have always been tied to engagement and PR volume. Blocking all that AI slop would instantly drop their growth numbers, so it is easier for them to just pass the cleanup cost onto open-source maintainers.

Re: GitHub appears to be struggling with measly three nines availability

#93

Post by cozzyd »

g947o wrote: post #77
pluc wrote: post #19

I'm amazed Microslop let us keep GitHub this long. Probably because they're training AI on it? To have a direct line to developers? I don't see why else they would've bothered with something that was so anti everything they stood for

What does Microsoft stand for?

Making Incrementally Crappier Repositories, Operating Systems, Office and any Future Technology

Re: GitHub appears to be struggling with measly three nines availability

#95

Post by tasuki »

cedws wrote: post #18

While GitHub obsess over shoving AI into everything, the rest of the platform is genuinely crumbling and its security flaws are being abused to cause massive damage. Last week Aqua Security was breached and a few repositories it owns were infected. The threat actors abused widespread use of mutable references in GitHub Actions, which the community has been screaming about for years, to infect potentially thousands of…

> GHA can’t even be called Swiss cheese anymore, it’s so much worse than that.

That's a high bar though. Few things are better than Swiss cheese.

Re: GitHub appears to be struggling with measly three nines availability

#96

Post by imglorp »

cedws wrote: post #18

While GitHub obsess over shoving AI into everything, the rest of the platform is genuinely crumbling and its security flaws are being abused to cause massive damage. Last week Aqua Security was breached and a few repositories it owns were infected. The threat actors abused widespread use of mutable references in GitHub Actions, which the community has been screaming about for years, to infect potentially thousands of…

Public service announcement

You can pin actions versions to their hash. Some might say this is a best practice for now. It looks like this, where the comment says where the hash is supposed to point.

      Old -->   uses: actions/checkout@v4
      New -->   uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
There is a tool to sweep through your repo and automate this: https://github.com/mheap/pin-github-action

Re: GitHub appears to be struggling with measly three nines availability

#97

Post by epistasis »

embedding-shape wrote: post #90
wongarsu wrote: post #73

Earlier quoted context omitted.

GH Actions was good for them as another billable feature, but I'm skeptical we actually gained much over external CI providers The improvements to PR review have been nice though

> The improvements to PR review have been nice though I dunno, probably the worst UX downgrade so far, almost no PRs are "fully available" on page load, but requires additional clicks and scrolling to "unlock" all the context, kind of sucks. Used to be you loaded the PR diff and you actually saw the full diff, except really large files. You could do CTRL+F and search for stuff, you didn't need to click to expand even…

I find it impossible to use the current diff view for most codebases, and spend tons of time clicking open all available sections...

They have somehow found the worst possible amount of context for doing review. I tend to pull everything down to VS Code if I want to have any confidence these days.

Re: GitHub appears to be struggling with measly three nines availability

#99

Post by __alexs »

williamdclt wrote: post #75
__alexs wrote: post #21

Earlier quoted context omitted.

GitHub have not really got much better at adding new features either though :(

They definitely have. Github evolved a lot faster after the microsoft acquisition, I remember being mildly impressed after it was stagnant for years (this is not an opinion on whether it was evolving in the right direction or if it was a good trade-off)

No they were slow at doing features before, and they are still slow afterwards.

Re: GitHub appears to be struggling with measly three nines availability

#100

Post by lijok »

imglorp wrote: post #96
cedws wrote: post #18

While GitHub obsess over shoving AI into everything, the rest of the platform is genuinely crumbling and its security flaws are being abused to cause massive damage. Last week Aqua Security was breached and a few repositories it owns were infected. The threat actors abused widespread use of mutable references in GitHub Actions, which the community has been screaming about for years, to infect potentially thousands of…

Public service announcement You can pin actions versions to their hash. Some might say this is a best practice for now. It looks like this, where the comment says where the hash is supposed to point. Old --> uses: actions/checkout@v4 New --> uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 There is a tool to sweep through your repo and automate this: https://github.com/mheap/pin-github-action

The problem is actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 probably doesn’t do this same pinning, and the actions ecosystem is such an intertwined mess that any single compromised action can propagate to the rest
Post reply on HN