I've never liked the idea of community actions in the critical build path, so I ... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

dqh on March 26, 2025 | parent | context | favorite | on: Whose code am I running in GitHub Actions?

I've never liked the idea of community actions in the critical build path, so I use official actions/* when I can, and otherwise use actions/github-script to invoke the GitHub API via inline JavaScript when I can't.

Uvix on March 26, 2025 [–]

I agree on community ones, but I’m happy to use the official actions from vendors like the Terraform and Azure ones too.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact