GitHub Actions Dependencies Deserve a Lockfile Too
The dependencies in a CI workflow deserve the same attention as the packages in the application it builds.
wade womersley – york based software engineer
Engineering notes from the sharp end
wade womersley – york based software engineer I write the way I work: direct, useful, and more interested in what holds up in production than what sounds clever on a slide.
317 published posts
Latest update
Latest post
The dependencies in a CI workflow deserve the same attention as the packages in the application it builds.
Archive
A sofa improves when one of its residents is a slightly ridiculous plush animal.
A permission request makes more sense when the user has just chosen the feature that needs it.
Give me a strange little creature in the background of a space film and I am immediately willing to believe it has a very busy life.
Moving a failed message to a dead-letter queue can keep a worker from repeatedly tripping over the same problem.
A train window can make perfectly ordinary countryside feel like the opening of a film.
Catching every exception around a coroutine can accidentally turn cancellation into an ordinary application failure.
An HTTP 304 response is supposed to arrive without a response body.
A mug with a daft face has a strong advantage over a perfectly sensible mug.
A mixed bag of Halloween sweets is a small economy waiting to happen.