We use GitHub Actions to build GitHub
github.blog
We use GitHub Actions to build GitHub
1–10 of 98 posts
Re: We use GitHub Actions to build GitHub
#2How does GitHub fix GitHub using GitHub when GitHub is down?
Re: We use GitHub Actions to build GitHub
#3How does GitHub fix GitHub using GitHub when GitHub is down?
They probably have some sort of development test server. That what I'd do.
Re: We use GitHub Actions to build GitHub
#4How does GitHub fix GitHub using GitHub when GitHub is down?
Obviously they internally self-host a version of GitHub Actions to build GitHub itself.
They know how unreliable it is to use the live version to do it.
Re: We use GitHub Actions to build GitHub
#5Hot take; they don't use their security alerts to manage dependency vulnerabilities.
Sorry, taking this on a tangent but the security alerts feature as integrated into the product is WAY less usable than other features, such as actions.
Just off the top of my head:
* No way to assign alerts to people
* No free-form comments when dismissing alerts?
* Old alerts re-open if a regression introduces the change back.. With no history on the alert to see why an "opened 6 months ago" alerts suddenly appeared
* Alerts that can't have PR fixes opened because "The vulnerable package is no longer used"(paraphrasing) are still open.. Why?
Such a lackluster area of the product it has me wanting to give Snyk(blarghh) another look or some other alternatives.
Re: We use GitHub Actions to build GitHub
#6I've used GitHub Actions quite extensively now, across infrastructure automation, Python CI/CD, and iOS CI/CD, and while not perfect, it's the best platform I've used for this stuff so far.
Compared to Jenkins it needed far less maintenance. Compared to CircleCI it felt much easier to work with and to build reliable pipelines due to the locking primitives it provides, and compared to Semaphore I found it easier to understand how the pieces fit together.
My criticism would mostly be about missing features, but the pace of development has been great and the only one I have left on my list is SSH debugging, which didn't end up being much of a blocker to our adoption anyway.
As for reliability, nothing is perfect, but in my experience it's at-or-above the level that CircleCI provided, and far surpassed our in-house Jenkins server.
Re: We use GitHub Actions to build GitHub
#7Hot take; they don't use their security alerts to manage dependency vulnerabilities. Sorry, taking this on a tangent but the security alerts feature as integrated into the product is WAY less usable than other features, such as actions. Just off the top of my head: * No way to assign alerts to people * No free-form comments when dismissing alerts? * Old alerts re-open if a regression introduces the change back.. With…
I haven't used the security alerts, but isn't the idea that you open an issue and then track it there using the regular project management tools?
> Snyk(blarghh)
What's wrong with Snyk?
Re: We use GitHub Actions to build GitHub
#8How does GitHub fix GitHub using GitHub when GitHub is down?
Maybe they use GitHub Enterprise Server to host internal repositories?
Re: We use GitHub Actions to build GitHub
#9Is that why it's down all the time? bazing I'll show myself out.
Re: We use GitHub Actions to build GitHub
#10[deleted]