Setting up and managing GitHub actions for multiple projects
summary
Organization uses org_report repository and workflow templates in .github to manage 30 repositories with shared CI templates; workflows run on GitHub runners for Ubuntu Windows and macOS, use JDK 14.0.1, cache Maven deps, run checkstyle PMD junit and jacoco, and a scheduled workflow regenerates and commits a daily README report. The talk shows concrete YAML fields, the fork-secret attack scenario and the mitigation of requiring approval for outside collaborators and restricting workflow permissions.
AI-written summary · about
chapters (10)
- 0:00GitHub Actions intro
- 2:00What GitHub Actions are
- 4:28Managing Actions across projects
- 5:37Workflow repo in .github
- 8:03Maven build workflow example
- 10:59Scheduled & manual triggers
- 14:12Secrets management in Actions
- 16:42Restrict untrusted forks
- 18:09Workflow permissions best practices
- 18:55Resources & closing
