uses: some/action@v2 resolves a tag, and a tag is a mutable pointer — so the code running in your pipeline can change without anything in your repository changing.…
Passing a private repository token as a build argument writes it into the image history, where docker history reads it back out for anyone who can pull the…
A workflow triggered by pull_request from a fork has no secrets, deliberately. pull_request_target runs in the context of the base repository and does have them. Combining pull_request_target with…
Documentation written by hand is a copy of the implementation, and copies drift — usually within a sprint, and always without anybody noticing. The annotations are verbose and…
9.3 moved the coverage settings out of the filter element into their own, and the old form is ignored rather than rejected. The failure is silent and reports…
The documentation was written in January and the API changed in March. Documentation written by hand is a copy, and copies drift — usually within a sprint.