Add new slides for Supply Chain Attacks and GitHub Well-Architected Framework; create workshop agenda

هذا الالتزام موجود في:
Chris Ayers
2025-01-14 17:42:02 +00:00
الأصل ce69d2fa95
التزام 8879724358
5 ملفات معدلة مع 70 إضافات و1 حذوفات

0
auth-setup.sh Normal file → Executable file
عرض الملف

عرض الملف

@@ -177,11 +177,16 @@ Demo: [Online Parser](https://yaml-online-parser.appspot.com/)
--- ---
# Supply Chain Attacks
![bg fit right:75%](image.png)
---
<!-- _footer: "https://docs.github.com/en/actions/security-guides" --> <!-- _footer: "https://docs.github.com/en/actions/security-guides" -->
# Security # Security
<div class="columns"> <div class="columns">
<div> <div>
@@ -254,6 +259,43 @@ updates:
--- ---
# GitHub Well-Architected Framework
![bg right fit](img/gh-waf.png)
- **Community-driven guide** for deploying GitHub effectively.
- Design principles
- Framework pillars
- Actionable, prescriptive advice
---
# GitHub Well-Architected Framework
## Key Principles of the Framework
<div class="columns">
<div>
- Security
- Scalability
- Automation
- Collaboration
</div>
<div>
- Observability
- Performance
- Governance
- Innovation
</div>
</div>
---
# Questions # Questions
![bg auto](./img/background.jpg) ![bg auto](./img/background.jpg)

ثنائية
slides/image.png Normal file

ملف ثنائي غير معروض.

بعد

العرض:  |  الارتفاع:  |  الحجم: 37 KiB

ثنائية
slides/img/gh-waf.png Normal file

ملف ثنائي غير معروض.

بعد

العرض:  |  الارتفاع:  |  الحجم: 768 KiB

27
slides/workshop.md Normal file
عرض الملف

@@ -0,0 +1,27 @@
# Agenda
| **Time** | **Activity** |
|------------|--------------------------------------------------------------------------------------------------|
| **1:00 PM** | **Recap and Basics**: Introduction to CI/CD and YAML basics. |
| **1:15 PM** | Overview of workflows and runners. |
| **1:30 PM** | Explanation of workflows: events, jobs, and steps in GitHub Actions. |
| **1:45 PM** | **Exercise**: Create a simple YAML workflow https://github.com/skills/test-with-actions |
| **2:00 PM** | **Exercise**: https://docs.github.com/en/actions/sharing-automations/creating-actions/creating-a-composite-action |
| **2:15 PM** | **Introduction**: Overview of GitHub Packages and the GitHub Container Registry (GHCR). |
| **2:30 PM** | **Supported Package Types**: Discuss the supported package types and how they integrate with GitHub repositories. |
| **2:45 PM** | **Publishing Packages**: |
| **3:00 PM** | **Exercise**: https://github.com/skills/publish-packages |
| **3:15 PM** | **Deployment**: Examples of workflows for automated deployment. |
| **3:30 PM** | Environments |
| **4:00 PM** | **Exercise**: https://github.com/codebytes/marp-slides-template |
| **4:15 PM** | **Security and Best Practices**: |
| **4:30 PM** | Using Dependabot for action updates and workflow maintenance. |
| **4:45 PM** | **Exercise**: |
| **5:00 PM** | Closing Q&A and sharing resources for further learning. |
## Resources
- https://github.com/sdras/awesome-actions
- https://github.com/actions
- https://github.com/actions/starter-workflows
- https://github.github.com/actions-cheat-sheet/actions-cheat-sheet.html