#github-actions - August 2023

Anyone know of a good way to set a timeout using ecspresso when editing the config file is not an option?

GitHub Actions: Required Workflows will move to Repository Rules
GitHub Actions: Required Workflows will move to Repository Rules

[Private Beta] Jenkins Scripted Pipeline Migrations
[Private Beta] Jenkins Scripted Pipeline Migrations

Actions runs triggered from tags or forks with the same name as a protected branch will now be blocked
Actions Runs triggered from tags or forks with the same name as a protected branch will now be blocked
The post Actions runs triggered from tags or forks with the same name as a protected branch will now be blocked appeared first on The GitHub Blog.

Anyone who can help with a GitHub Action. I'm trying to check if any relevant files has changed, if so run some test steps, if not just end the pipeline with success to make the GitHub required step pass.

required-test:
  name: required-test
  runs-on: ubuntu-latest
  environment: production
  strategy:
    fail-fast: false
    matrix:
      python-version: [ '3.11' ]

  steps:
    - uses: actions/checkout@v3
      with:
        fetch-depth: 0

    - name: Check if any files changed
      id: changed-files
      uses: tj-actions/changed-files@v37
      with:
        files: |
          .github/workflows/test_project2.yml
          test_project2/**

    - name: Run step if no files changed
      if: steps.changed-files.outputs.any_changed == 'false'
      run: |
        echo "No relevant files changed. Return success"
        exit 0

    - name: Test
      run: |
        echo "test"

But even with the exit 0 the step Test is run and depending jobs also run. How do I exit the full workflow here?

this might work https://stackoverflow.com/a/75809743/398012

Looks like our GHA are failing with:

Error saving credentials: error storing credentials - err: exit status 1, out: not implemented

I see multiple issues discussing this (https://github.com/docker/login-action/issues/515), but none of them have an outright solution. Has anyone encountered this?

We're using https://github.com/cloudposse/github-action-docker-build-push for our build/push

Repository Actions Runners List
Repository Actions Runners List
The post Repository Actions Runners List appeared first on The GitHub Blog.

Hi, I'm looking for findings regarding github-actions (GA) vs circleci (cci). I've used the latter a fair bit (a whole year of cci on some non-trivial pipeline), but my impression is that GA is significantly more powerful than cci overall. Any concrete capabilities in GA that are not or only partially in cci? Limitations in GA that are not in cci? This is for an org that has about 50 repos that build a variety of artifacts (jars, docker images, node modules) and deploy to a few places (AWS ec2 instances, lambdas, soon kubernetes). Migrating from Jenkins, the options so far are cci and GA.

IMO it’s not that GHA is more powerful than CCI, it’s that they’ve done a better job getting rallying the community behind it. there are more workflows/actions that are readily available (this can also be a bad thing because devs sometimes grab workflows without really inspecting them and sometimes use :latest which is a security risk). I think they both have all the features, I just find GHA more intuitive.

Hi Im looking for a way to refresh token for an Assumed role in GHA. We are running batch jobs using github actions and assumed roles and some of the batch jobs are long running up to 36 hours. Assumed roles have a default duration of 1 hour
Undwer the assumed role workflow has two jobs with multiple steps.

- Submit Job with aws cli batch job command
- Check Job status
- config aws creds
- check job status loops until job succeeds or fails
After an hour times out with An error occurred (ExpiredTokenException) when calling the DescribeJobs operation: The security token included in the request is expired"
Any help would be appreciated

On https://docs.github.com/en/actions/using-jobs/running-jobs-in-a-container it shows how you can run a GA job in a container. I have a docker image that has build tools in a private repo in AWS ECR, so we need to generate a token (aws ecr get-login-password). Can one job generate the token and the next job uses it? Does this then prevent us from ever re-running individual jobs of a workflow?

GitHub Actions: Review network access settings for the self-hosted runners
GitHub Actions: Review network access settings for the self-hosted runners
The post GitHub Actions: Review network access settings for the self-hosted runners appeared first on The GitHub Blog.

Update to Actions usage in Enterprise Managed User namespace repositories
Update to Actions usage in Enterprise Managed User namespace repositories
The post Update to Actions usage in Enterprise Managed User namespace repositories appeared first on The GitHub Blog.