The Dark Playground of CI/CD - Attack Delivery by GitHub Actions
Explore potential attack vectors in GitHub Actions, including novel techniques like Malicious Custom Action and GitHub Actions C2. Learn about CI/CD security threats and their implications.
Security Risks in Third-Party GitHub Actions - Overlooked Consequences
Explore security risks in GitHub Actions, including build permission issues and "unpinnable actions." Learn about potential consequences and challenges in protecting against compromised third-party actions.
Carvel - Clean Tools for Cloudy Problems
Carvel套件为云原生系统提供简洁高效的工具，遵循UNIX哲学，解决镜像处理、依赖管理和YAML配置等常见痛点，灵活适应各种云工作流程需求。
Hazel Engine on Linux - Continuous Integration and Self-Hosted Runners
Explore Hazel Engine on Linux: CI setup, platform expansion, VPS self-hosted runners, and GitHub workflows. Learn about Remote SSH in VS Code for efficient development.
Using GitHub Actions Environment Variables and Secrets
Learn to use GitHub Actions Environment Variables and Secrets for secure and efficient CI/CD pipelines. Covers workflow, job, and step-level variables, built-in variables, and integrating Snyk for security.
Hacker Traction Through GitHub Actions - Is Your Open Source Project Safe?
Explore potential security vulnerabilities in GitHub Actions and learn strategies to safeguard open source projects from malicious exploitation.
CI/CD with GitHub Actions - Building and Deploying Applications
Comprehensive guide to GitHub Actions for CI/CD: from basics to advanced topics like triggers, workflows, secrets, and deployments to container registries and Azure.
DevOps Day - Exploring Depth and Breadth of DevOps Practices
Explore DevOps trends: GitOps security, AI integration, serverless observability, coaching approaches, and CI/CD with GitHub Actions. Gain insights to accelerate software delivery and maintenance.
Code Smarter, Spend Wiser - Infracost and Open Tofu Unleashed
Discover how to optimize cloud costs and enhance development practices using Infracost, GitHub Actions, and Open TOFU for smarter infrastructure as code solutions.
Front End Testing with GitHub Actions - NDC London 2024
Learn to automate front-end testing using GitHub Actions, ensuring UI, functionality, and visual consistency before deployment. Integrate seamlessly with existing workflows for robust continuous deployment.
Front End Testing with GitHub Actions - NDC Sydney 2024
Explore automating front-end tests using GitHub Actions, integrating them into your deployment pipeline for robust, pre-merge validation of UI changes and functionality.
Deploy and Monitor ML Pipelines with Open Source and Free Applications
Learn to deploy and monitor ML pipelines using open-source tools. Automate data refresh, generate forecasts, and set up monitoring dashboards with GitHub Actions, Docker, MLflow, and more.
Continuous Integration Tutorial - Building a CI Pipeline for Code Quality
Learn to build a CI pipeline using GitHub Actions and Qodana, automating code quality checks and fixes. Understand CI concepts, importance of automated tests, and practical implementation for improved software development.
Code Smarter, Spend Wiser - Infracost and Open Tofu Unleashed
Discover how to optimize cloud costs and enhance development practices using Infracost, GitHub Actions, and Open TOFU for smarter infrastructure as code solutions.
Avoiding Static Shared Secrets in GitHub Actions
Learn best practices for securing GitHub Actions workflows, avoiding static shared secrets, and implementing safer alternatives for CI/CD pipelines.
Setting Up and Managing GitHub Actions for Multiple Projects
Learn to set up and manage GitHub Actions across multiple projects efficiently, with insights on starter actions, organization reports, and custom workflows for Java and Python repositories.
The Road to Side-Channel Regression Testing in CI Development
Explore integrating side-channel regression testing into CI development, with practical demonstrations and insights on implementing countermeasures for sample attacks.
How to Use GitHub Actions with Security in Mind
Comprehensive guide to enhancing GitHub Actions security, covering access control, secrets management, containerization, and best practices for protecting CI/CD pipelines and workflows.
Introduction to GitHub Actions
Automate repository workflows, CI/CD, and security with GitHub Actions. Learn to set up workflows, integrate with Package Registry, and create custom actions for enhanced productivity.
Modern Continuous Integration with Azure Pipelines
Explore modern CI with Azure Pipelines, leveraging cloud-first strategies, containers, and cross-platform testing to enhance software quality while minimizing costs and overhead.
Pwning the CI - GitHub Actions Edition
Explore GitHub Actions security vulnerabilities and their impact on CI/CD pipelines. Learn about common exploits and best practices to protect your supply chain from potential attacks.