github | michaelheap.com

#github

2025

Automated npm secret rotation in GitHub Actions

How to keep GitHub Actions publishing smoothly under NPM's new 90-day token limit by rotating NPM tokens across all your repositories using github-update-secret.

#github #javascript

Pin your GitHub Actions

Secure your GitHub Actions by pinning them to commit SHAs, preventing supply chain attacks. Learn how to automate updates and enforce best security practices.

❤️ #github

2023

GitHub Actions notifications in Slack

See your GitHub Actions success/failure notifications in Slack without using additional actions in your workflow.

#github

Accessing secrets from forks safely with GitHub Actions

Trigger workflow runs once a team member has reviewed the PR manually.

❤️ #github

Set `created_at` with GitHub Actions when a PR is merged

Dynamically set values in your blog frontmatter when publishing using GitHub Actions

#github

GitHub scheduled reminders

Prioritise PR reviews by receiving reminders via Slack on a fixed schedule.

#github

Check permissions in a GitHub Actions workflow

Need to know what permission someone has on a repo before running a workflow? You can use either author_association or the /permission endpoint.

#github

2022

Running `gickup` on a QNAP NAS

Backup your git repositories on a schedule using gickup. Do it to your NAS, and make it a "set and forget" backup process.

#backup #git #github

Using `GITHUB_TOKEN` as a default `input` value

Allow the user to specify a Personal Access Token (PAT) in your GitHub Action whilst falling back to GITHUB_TOKEN by default

🎓 #github

The GitHub wiki is an anti-pattern

Using the wiki on GitHub makes life more difficult for your users, and you as a maintainer. Use the /docs folder and GitHub Pages instead and keep your docs in sync with code

❤️ #github #opinion

2021

Test experimental versions with GitHub Actions

Use a matrix to run your tests on new versions without failing the entire workflow run

❤️ #github

Dynamic matrix generation with GitHub Actions

Ensure that your workflows are always running with up to date data by fetching data dynamically at runtime

❤️ #github

Getting started with problem matchers

Learn how to build and use problem matchers with GitHub Actions + VSCode

❤️ #github #problem-matcher

The ultimate guide to GitHub Actions authentication

A look at GITHUB_TOKEN, Personal Access Tokens and authenticating with GitHub Applications for GitHub Actions. Pros, cons and real world examples of when each option is the right choice.

❤️ #github

Pin GitHub issues

Pin important issues to the top of your GitHub issues page. Useful for pending enhancements, common issues and items you're looking for help with

🎓 #github

Publishing a Ruby gem to the GitHub Package Registry

How to fix "Unable to push RubyGem to Package Registry (The expected resource was not found)"

🎓 #github #ruby

2020

Show GitHub Actions

Show all GitHub Actions being used by a user or organisation

❤️ #github #project

Fetch all pages with Octokit pagination

🎓 #github #javascript #octokit

Improve your GitHub Actions security

Using arbitary branches for Actions is a risk, but as always it’s a compromise between security and making life easy for ourselves.

pin-github-action allows you to pin to a specific SHA whilst still pointing to a branch or tag

❤️ #github #project #security