#githubactions

An engineer scrolling a failed build on a Monday afternoon found our registry deploy token sitting in...

An agent opened a pull request on my repo last week. Eleven files changed, three new tests, all...

Automating Your Deploy Process with GitHub Actions CI/CD If you've ever deployed code by...

The four questions, and the one nobody asks Pulling a container image somebody else built...

Intro: Maintainers Caught at a Fork 🍴 How can maintainers safely test forked PRs without...

Short answer: to obfuscate a .NET app in GitHub Actions, add a step after dotnet publish that runs...

Short answer: issue a separate, narrowly scoped key for each CI consumer, give it only the...

Short answer: use two narrowly scoped API keys, switch traffic with an explicit activation step, and...

A scoped API key for a least-privilege CI pipeline belongs outside the production trust boundary,...

A real pain point for mobile apps is waiting days or weeks for App Store and Play Store reviews...

We build two separate Android apps from one Expo React Native codebase. Part 1 of a 5-part series: why we moved off EAS's free build tier, the signing fingerprint error that had nothing to do with GitHub Actions, and the gitignored local counter that silently shipped the wrong version number.

In the fast-paced world of modern software development, continuous integration and continuous...