produced by Classmethod

# GitHub Actions articles

GitHub Actionsは、GitHubリポジトリ内で自動化ワークフローを定義・実行できる機能です。CI/CDパイプラインの構築に活用できます。

GitHub Actions workflow lockfiles are now GA: Trying out how to prevent missed updates and forgotten onboarding with CI, Dependabot, and policies

2026.11.03

Enforcing SHA pinning for GitHub Actions via settings: testing what gets blocked, and whether tags can still pass with a lockfile

2026.11.02

Countermeasures against pwn requests: pull_request_target becomes permission-based starting December 2. Remaining attack paths and how to identify them

2026.10.30

Trying out GitHub Actions workflow lockfiles: pinning dependencies to commits with actions.lock, and stopping before execution if they drift

2026.10.16

When AWS Authentication via GitHub Actions OIDC Failed, I Checked the sub Claim and Fixed the Trust Policy

2026.10.10

I thought about version management and CI/CD with GitHub Actions for Snowflake Cortex Agents

2026.08.31

I tried running GitHub Actions self-hosted runners on Lambda MicroVMs

2026.08.27

Claude Code v2.1.227 Major Updates - Sonnet 5 introductory pricing through 8/31 will continue to be maintained

2026.08.11

Running GitHub Actions Runner on a local MacBook Pro

2026.08.06

The Story of How Dependabot's Major Version Bumps Broke Due to Ecosystem Unreadiness — The Traps of ESLint 10 and TypeScript 7

2026.07.21

The Problem of Dependabot's uv Ecosystem Breaking Lower Version Bounds in pyproject.toml and How to Deal with It

2026.07.18

The Trap Where Dependabot Wildcard Groups Disable Cooldown, and How to Deal with It

2026.07.18

How to Fix the "Cannot use 'in' operator" Error in pnpm/action-setup@v6

2026.07.14

pnpm v11 minimumReleaseAge Causes Dependabot CI Failures ─ Summary of Root Cause, Workarounds, and Upstream Status

2026.07.11

A GitHub Action has been added to automatically evaluate LLM accuracy in CI with Langfuse

2026.05.26

Securely Pinning Action Versions in GitHub Actions: From Hashes and Immutable Tags to Workflow-Level Dependency Locking

2026.05.18

[Update] AWS STS now supports provider-specific claim validation for GitHub, Google, CircleCI, and OCI in OIDC federation

2026.02.03

I tried automatic synchronization of Backlog documents with GitHub Actions

2026.02.02

Automatically Deploy Twilio Functions from GitHub Actions

越井琢巳 (Koshii Takumi)

2026.01.11

I'll incorporate validators into GitHub Actions to detect inconsistencies in VST3 plugins during pull requests

越井琢巳 (Koshii Takumi)

2026.01.10

Building Workload Identity Federation with Snowflake × Terraform × GitHub Actions

2025.12.10

I tried building S3 Storage Integration with Snowflake × Terraform

2025.11.04

Building a Multi-Account CI/CD Environment for Snowflake × Terraform Using GitHub Actions

2025.10.11

Mitigating GitHub Actions compromise and supply chain risks: Using pinact to specify actions by hash value instead of version

2025.03.17