Signed monorepo releases using GitHub Workflows
Replacing 150 lines of GPG shell with GitHub-signed commits to satellite repos: zero private keys on the runner, via createCommitOnBranch and a custom Action.
Read →#github-actions
2 articles
-
-
Google Cloud Keyless Authentication in GitHub Actions
Authenticate to Google Cloud from GitHub Actions without long-lived service account keys, using OIDC and Workload Identity Federation, in five steps.
Read →