GitHub Actions

A quick guide on the advantages of using GitHub Actions as your preferred CI/CD tool—and how to build a CI/CD pipeline with it.

The dependency graph helps developers and maintainers understand the code they depend on, and now includes GitHub Actions!

Our community has been hard at work through December shipping updates. Here’s our staff picks for open source projects with major version releases.

We’re excited to announce the V4 release of the OpenSSF’s Scorecard project in partnership with Google.

When you want to create a workflow in the Actions tab of your repository, the recommendations are now based on an analysis of repo content.

Looking to avoid security vulnerabilities, buttons that don’t work, slow site speeds, or manually writing release notes? This one’s for you.

GitHub has partnered with the OpenSSF and Project Sigstore to add container image signing to our default “Publish Docker Container” workflow.

From learning YAML to scripting with Bash, here are a few simple tips for developers who want to speed up their workflows.

DRY your Actions configuration with reusable workflows (and more!)

GitHub Actions now supports OpenID Connect for secure deployment to different cloud providers via short-lived, auto-rotated tokens.

The GitHub Services Engineers have released the Advanced Security Enforcer GitHub Action to enable organizations to utilize code scanning in a consistent and automated way.

Check out some advanced automation and CI/CD capabilities you can use today with GitHub Actions on any GitHub account.

Tips on how to get started using GitHub Actions and resources to learn more about making it work for you.

GitHub Actions can automate several common security and compliance tasks, even if your CI/CD pipeline is managed by another tool.

GitHub Marketplace just passed 10,000 published actions! Learn about contributing to this growing open source ecosystem.