Polygraph — Cross-repo visibility & persistent memory for AI agents
The meta-harness that gives agents what they're missing: visibility across every repo boundary, and memory that survives every session. The meta-harness that gives agents what they’re missing: visibility across every repo boundary, and memory that survives every session. The meta-harness that gives agents what they’re missing: visibility across every repo boundary, and memory that survives every s
GitHub - cicd-sensor/cicd-sensor: Open-source eBPF runtime security sensor for GitHub Actions and GitLab CI/CD.
When a compromised dependency in a CI/CD job steals your cloud credentials and leaks them, would you catch it? Would you have the logs to investigate afterward? cicd-sensor is an open-source sensor that lets every team answer both. Detection: Detects supply-chain attacks at runtime using process ancestry (e.g. credential access from a process descended from npm install) and correlation across sign
automerge-gate: GitHubのAuto Mergeをひとつの必須チェックに集約するGitHub Action
GitHubのAuto Mergeをひとつの必須チェックに集約するためのGitHub Action automerge-gate を作ったので紹介します。 GitHub: pkgdeps/automerge-gate 背景: GitHub Auto Mergeは集約するアクションなしだと使いにくい 前提として、GitHubのAuto Mergeを使うには、必須チェック未達成のPRをマージできない状態にするBranch protection ruleやRulesetの設定が必要です。 これらの保護機能でPRがブロックされる状態を作ったうえで、すべての必須チェックが成功した時点でAuto Mergeが発火する、という仕組みになっています。 逆に言うと、Auto Mergeを使うには何かしらのステータスチェックを必ず必須に入れる必要があります。 そして、Branch protection rul
GitHub - joschi/blueskyfeedbot: A bot that posts RSS feeds to Bluesky via GitHub Actions
name: FeedBot on: schedule: # This will run every five minutes. Alter it using https://crontab.guru/. - cron: '*/5 * * * *' workflow_dispatch: # This allows manually running the workflow from the GitHub actions page concurrency: group: feedbot jobs: rss-to-bluesky: runs-on: ubuntu-latest steps: - name: Generate cache key uses: actions/github-script@v6 id: generate-key with: script: | core.setOutpu
Manage agent skills with GitHub CLI - GitHub Changelog
Agent skills are reshaping how developers work with AI coding agents. Today we’re launching gh skill, a new command in the GitHub CLI that makes it easy to discover, install, manage, and publish agent skills from GitHub repositories. What are agent skills? Agent skills are portable sets of instructions, scripts, and resources that teach AI agents how to perform specific tasks. They follow the open
GitHub - dsherret/gagen: Generate complex GitHub Actions YAML files using a declarative API.
Generate complex GitHub Actions YAML files using a declarative API. Gagen lets you define workflows in TypeScript with a fluent, declarative API that automatically resolves step ordering and propagates conditions. The condition propagation helps skip unnecessary setup steps and eliminates needing to repeat condition text over and over again. Additionally, gagen automatically pins dependencies in t
GitHub Stacked PRs
Arrange pull requests in an ordered stack and merge them all in one click. Each PR represents one focused layer of your change, reviewed independently and landed together. Navigate between PRs in your stack from the GitHub UI, check the status of every layer at a glance, and trigger a cascading rebase across the entire stack with one click.
GitHub - redwoodjs/agent-ci: Agent-CI is local GitHub Actions for your agents.
Run GitHub Actions on your machine. Caching in ~0 ms. Pause on failure. Fix and retry — before you commit, before you push. Agent CI is a ground-up rewrite of the GitHub Actions orchestration layer that runs entirely on your own machine. It doesn't wrap or shim the runner: it replaces the cloud API that the official GitHub Actions Runner talks to, so the same runner binary that executes your jobs
GitHub - mitchellh/vouch: A community trust management system based on explicit vouches to participate.
A community trust management system. FAQ · Cookbook · Contributing People must be vouched for before interacting with certain parts of a project (the exact parts are configurable to the project to enforce). People can also be explicitly denounced to block them from interacting with the project. The implementation is generic and can be used by any project on any code forge, but we provide GitHub in
Home | GitHub Agentic Workflows
Repository automation, running the coding agents you know and love, with strong guardrails in GitHub Actions. Imagine a world where improvements to your repositories are automatically delivered each morning, ready for you to review. Issues are automatically triaged, CI failures analyzed, documentation maintained and tests improved. All defined via simple markdown files. GitHub Agentic Workflows de
Release GitHub CLI 2.81.0 · cli/cli
Support for GitHub Release Attestations This release introduces the release verify and release verify-asset commands for verifying GitHub Release attestations. Part of the Immutable Releases initiative, a release attestation provides a signed, timestamped binding between a release, its git tag, and any associated assets. These new commands provide a convenient way to verify the integrity of an imm
ghtkn でローカル開発用に GitHub Access Token をセキュアに生成して PAT から卒業する
ローカル開発のために GitHub App からセキュアに User Access Token を生成する CLI である ghtkn を紹介します。 まとめ ghtkn は Device Flow を用いて GitHub App から User Access Token を生成する CLI セキュアなローカル開発を実現 No More Personal Access Token Personal Access Token と違い短命 (8時間) な access token GitHub App とユーザー両方が持ってる権限しか持たず、両方がアクセスできるリポジトリにしかアクセスできない Secret manager を用いて access token を管理 プレインテキストや shell の環境変数に access token を露出しないため、流出リスクが低い 複数の GitHub
GitHub - AdnaneKhan/gato-x: GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
Gato-X is a FAST scanning and attack tool for GitHub Actions pipelines. You can use it to identify Pwn Requests, Actions Injection, TOCTOU Vulnerabilities, and Self-Hosted Runner takeover at scale using just a single API token. It will also analyze cross-repository workflows and reusable actions. This surfaces vulnerabilities that other scanners miss because they only scan workflows within a singl
GitHub Actions の依存関係を再帰的に出力する「ghatree」の紹介
{ "type": "repository", "dependencies": [ { "type": "workflow", "path": ".github/workflows/example1.yml", "dependencies": [ { "type": "job", "path": "job1", "dependencies": [ { "type": "action", "repository": { "owner": "actions", "name": "checkout" }, "ref": "v5", "dependencies": [] }, { "type": "action", "repository": { "owner": "actions", "name": "setup-node" }, "ref": "v4", "dependencies": []
How the GitHub CLI can now enable triangular workflows
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Announcing Mastra Factory | Mastra Blog
DiffsHub, from Pierre
GitHub - DataDog/ensure-ci-success: Keep your PRs green by ensuring all CI checks pass.
GitHub - Finatext/gha-fix: Automates security and maintenance fixes in GitHub Actions workflows
GitHub - mheap/pin-github-action: Pin your GitHub actions to a specific hash