The Monsters in Your Build Cache - GitHub Actions Cache Poisoning | Adnan Khan - Security Research
Start typing to search posts... Search across titles, content, and tags Introduction UPDATE 01/23/25 - Some of the techniques in this blog post no longer apply, however the core technique is still valid: Cache poisoning allows workflow lateral movement. The big change is that you can no longer write to the cache after the workflow job finishes, these means you have to get creative by performing th
Start and track Copilot coding agent tasks from Raycast - GitHub Changelog
Raycast is a powerful free launcher for macOS. It can launch apps, search files, control your system, and leverage community-built extensions. Now, it can also interact with AI agents. With the new GitHub Copilot extension for Raycast, you can hand tasks to Copilot coding agent and track progress from anywhere on your Mac. To start a new task, open Raycast with Command+Space, then find and select
Copilot coding agent now supports AGENTS.md custom instructions - GitHub Changelog
Copilot coding agent now supports AGENTS.md custom instructions With custom instructions, you can guide Copilot on how to understand your project as well as how to build, test, and validate its changes. Copilot coding agent, our autonomous background agent, now supports AGENTS.md custom instructions. You can create a single AGENTS.md file in the root of your repository. You can also create nested
Claude Codeの新しいプラグイン機能を先行体験する
【2025年10月10日追記】プラグイン機能が正式にリリースされました。この記事から変わっている仕様もありますので、実用する際は公式ドキュメントを参照してください。 https://www.anthropic.com/news/claude-code-plugins ~/.claude を眺めていたらいつの間にか plugins ディレクトリが生えていたのでよく観察したところ、プラグイン機能の実装が進んでいるようです。 すでに触れるようになっているので、概要や手順を紹介します。 概要 Claude Codeプラグインでは、gitリポジトリを介してスラッシュコマンド、サブエージェント、フック を配ることができます。 リポジトリを登録しておくと、Claude Code起動時に pull して最新の状態を同期して読み込んでくれる仕組みです。 現在もMCPサーバーのPromptとして外部からスラッ
Launching BuildJet Cache for GitHub Actions
A reliable, faster and free alternative to GitHub Actions cache. We're thrilled to announce buildjet/cache, a reliable, fast, and free alternative to GitHub Actions cache. It is compatible with any runner - official, self-hosted, or BuildJet, and no matter the runner used, BuildJet doubles the free storage, providing 20 GB/repo/week storage space for free. Just like with GitHub Actions cache, when
Dependencies on issues - GitHub Changelog
Dependencies on issues are now generally available! You can now specify which issues are blocked by or blocking others, making it easy for teams to define work that must be completed before other work can begin. This has been one of our most requested features. ➕ Getting started To get started, open the Relationships section in the issues sidebar and select Mark as blocked by or Mark as blocking.
The stacking workflow
Stacked PRs. Stacked diffs. Stacked changes.A better workflow to manage pull requests. Code review takes a long timeCode review can take a long time, for both the pull request author and reviewers. As the author, you can be stuck waiting for hours, days or even years before you can merge. This is especially challenging on distributed teams across different timezones. You're trying to ship a featur
GitHub Actions policy now supports blocking and SHA pinning actions - GitHub Changelog
GitHub Actions policy now supports blocking and SHA pinning actions GitHub Actions is powered by a diverse ecosystem of first-party and community contributed actions. If one of these actions has a vulnerability or is compromised by a malicious actor, it can impact all of its dependents in the supply chain. Tools like Dependabot can identify and upgrade actions versions with known vulnerabilities t
GitHub Actionsをもっと安全に、もっと便利に運用する方法 - エムスリーテックブログ
【Unit4 ブログリレー4日目】 はじめまして！ Unit4でエンジニアをしている大熊です。こちらはUnit4ブログリレーの4日目の記事です。 エムスリーではGitLabからGitHubへの移行が進められています。私は現在、Unit4で最初のGitHubを活用したプロダクトの開発に取り組んでいます。 今回はGitHubの強力なCI/CD機能であるGitHub ActionsのTipsをご紹介します。 Unit4の概要については1日目の関根の投稿をご覧ください！ www.m3tech.blog サードパーティのActionを安全に使う ghats Actionをコミットハッシュで固定 自作Actionをモノレポで管理する 構成 ビルドとデプロイを分離する アーチファクトの共有方法 おわりに We are Hiring! エンジニア採用ページはこちら エンジニア新卒採用サイト カジュアル面談
For Good First Issue | Make your next open-source contribution matter.
Committing to a better futureLend your skills to an open source project focused on the Digital Public Goods (DPGs). From fighting climate change, to solving world hunger, your efforts will contribute to creating a better future for everyone. Together, we can drive positive and lasting contributions to the world, one commit at a time. Explore a DPG repo below to get started.
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Features: Our Guides – Axolo
codex/codex-rs/config.md at main · openai/codex
GPT-Prompt-Hub/CLAUDE.md at main · LichAmnesia/GPT-Prompt-Hub
Managing Stacked PRs - Using Stacked Pull Requests in GitHub | Axolo Blog
Stacked PRs with Git and Github
Are dependent pull requests in GitHub possible?
GitHub - timothyandrew/gh-stack: Manage PR stacks/chains on Github
Release v0.0.34 · microsoft/playwright-mcp
GitHub trigger event options :: CircleCI Documentation
Users, organizations, and integrations guide - CircleCI Docs
