246 أسطر
5.6 KiB
Markdown
246 أسطر
5.6 KiB
Markdown
---
|
||
marp: true
|
||
theme: custom-default
|
||
footer: '@Chris_L_Ayers - https://chris-ayers.com'
|
||
---
|
||
<!-- _footer: 'https://github.com/codebytes/github-actions-demos' -->
|
||
|
||
# CI/CD with GitHub Actions
|
||
|
||
## Chris Ayers
|
||
|
||
|
||
---
|
||
|
||
|
||
|
||
## Chris Ayers
|
||
### Senior Customer Engineer<br>Microsoft
|
||
|
||
<i class="fa-brands fa-twitter"></i> Twitter: @Chris\_L\_Ayers
|
||
<i class="fa-brands fa-mastodon"></i> Mastodon: @Chrisayers@hachyderm.io
|
||
<i class="fa-brands fa-linkedin"></i> LinkedIn: - [chris\-l\-ayers](https://linkedin.com/in/chris-l-ayers/)
|
||
<i class="fa fa-window-maximize"></i> Blog: [https://chris-ayers\.com/](https://chris-ayers.com/)
|
||
<i class="fa-brands fa-github"></i> GitHub: [Codebytes](https://github.com/codebytes)
|
||
|
||
---
|
||
|
||
|
||
# Agenda
|
||
- YAML
|
||
- CI / CD
|
||
- Actions Overview
|
||
- Demos
|
||
|
||
---
|
||
|
||
<div class="columns">
|
||
<div>
|
||
|
||
# YAML
|
||
## **Yet Another Markup Language**
|
||
|
||
GitHub uses YAML for workflows
|
||
|
||
Demo: [Online Parser](https://yaml-online-parser.appspot.com/)
|
||
|
||
<!-- Zelda:
|
||
type: pit bull
|
||
favoriteThings:
|
||
- treats
|
||
- naps
|
||
- belly rubs
|
||
toys: [bone, doll] -->
|
||
|
||
</div>
|
||
<div>
|
||
|
||
| Feature | Description |
|
||
| --------- | --------------------------------- |
|
||
| Lists | Start with a – |
|
||
| Key-Value | Key: value |
|
||
| Objects | Objects:<br>Properties of objects |
|
||
|
||
</div>
|
||
|
||
</div>
|
||
|
||
---
|
||
|
||
# What is CI/CD?
|
||
|
||
<div class="mermaid ci" >
|
||
flowchart LR
|
||
subgraph Continuous Integration
|
||
direction LR
|
||
A[Code] --Check In--> B[Build]
|
||
B -- Auto --> C[Unit Tests]
|
||
C -- Auto --> D[Dev Release]
|
||
D -- Auto --> E[Additional Tests]
|
||
end
|
||
</div>
|
||
<div class="mermaid cd">
|
||
flowchart LR
|
||
subgraph Continuous Delivery
|
||
direction LR
|
||
G[Code] --Check In--> H[Build]
|
||
H -- Auto --> I[Unit Tests]
|
||
I -- Auto --> J[Dev Release]
|
||
J -- Auto --> K[Additional Tests]
|
||
K --Manual--> L[Release]
|
||
end
|
||
linkStyle 4 color:red;
|
||
</div>
|
||
<div class="mermaid cd">
|
||
flowchart LR
|
||
subgraph Continuous Deployment
|
||
direction LR
|
||
M[Code] --Check In--> N[Build]
|
||
N -- Auto --> O[Unit Tests]
|
||
O -- Auto --> P[Dev Release]
|
||
P -- Auto --> Q[Additional Tests]
|
||
Q -- Auto --> R[Release]
|
||
end
|
||
linkStyle 4 color:green;
|
||
</div>
|
||
|
||
---
|
||
|
||
|
||
# Actions Overview
|
||
|
||
- Live in the .github/workflows folder
|
||
- Workflows are defined in YAML
|
||
- Workflows are Event Driven
|
||
|
||
---
|
||
|
||
|
||
|
||
# Workflows
|
||
- [Events](https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows) trigger workflows
|
||
- Workflows contain jobs
|
||
- Jobs contain steps
|
||
- Steps are commands or actions
|
||
|
||
---
|
||
|
||
|
||
# Jobs
|
||
- Workflows can contain multiple jobs
|
||
- Each job runs on a [Runner](https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners)
|
||
|
||
---
|
||
|
||
# ACT
|
||
## Run Actions Locally
|
||
|
||
<i class="fa-brands fa-github"></i> [nektos/act](https://github.com/nektos/act)
|
||
|
||
|
||
|
||
---
|
||
|
||
|
||
# DEMOS
|
||
|
||
---
|
||
|
||
<!-- _footer: "https://docs.github.com/en/actions/security-guides" -->
|
||
|
||
# Security
|
||
|
||
|
||
<div class="columns">
|
||
<div>
|
||
|
||
- Never use structured data as a secret
|
||
- Register all secrets used within workflows
|
||
- Audit how secrets are handled
|
||
- Use credentials that are minimally scoped
|
||
- Audit and rotate registered secrets
|
||
- Consider requiring review for access to secrets
|
||
|
||
</div>
|
||
<div>
|
||
|
||
- Use an action instead of an inline script (recommended)
|
||
- Use an intermediate environment variable
|
||
- Use OpenID Connect to access cloud resources
|
||
- Pin third-party actions to a full length commit SHA
|
||
|
||
</div>
|
||
</div>
|
||
|
||
---
|
||
|
||
# Actions Updates - Dependabot
|
||
|
||
<div class="columns">
|
||
<div>
|
||
|
||
- Actions are regularly updated for enhanced automation.
|
||
- Dependabot keeps GitHub Actions references in workflow.yml up-to-date.
|
||
- If newer action versions exist, Dependabot sends an update pull request.
|
||
- Dependabot also updates git references for reusable workflows.
|
||
</div>
|
||
<div>
|
||
|
||
<br>
|
||
|
||
```.github/dependabot.yml```
|
||
```yaml
|
||
version: 2
|
||
updates:
|
||
# See documentation for possible values
|
||
- package-ecosystem: "github-actions"
|
||
# Location of package manifests
|
||
directory: "/"
|
||
schedule:
|
||
interval: "weekly"
|
||
```
|
||
|
||
</div>
|
||
</div>
|
||
|
||
---
|
||
|
||
# Questions
|
||
|
||
|
||
|
||
|
||
---
|
||
|
||
# Resources
|
||
|
||
<div class="columns">
|
||
<div>
|
||
|
||
## Links
|
||
|
||
[https://docs.github.com](https://docs.github.com)
|
||
[https://skills.github.com](https://docs.github.com)
|
||
[https://docs.github.com/actions/security-guides](https://docs.github.com/actions/security-guides)
|
||
[codebytes/github-actions-demos](https://github.com/codebytes/github-actions-demos)
|
||
</div>
|
||
<div>
|
||
|
||
## Follow Chris Ayers
|
||
|
||
<i class="fa-brands fa-twitter"></i> Twitter: @Chris\_L\_Ayers
|
||
<i class="fa-brands fa-mastodon"></i> Mastodon: @Chrisayers@hachyderm.io
|
||
<i class="fa-brands fa-linkedin"></i> LinkedIn: - [chris\-l\-ayers](https://linkedin.com/in/chris-l-ayers/)
|
||
<i class="fa fa-window-maximize"></i> Blog: [https://chris-ayers\.com/](https://chris-ayers.com/)
|
||
<i class="fa-brands fa-github"></i> GitHub: [Codebytes](https://github.com/codebytes)
|
||
|
||
</div>
|
||
|
||
</div>
|
||
|
||
<!-- Needed for mermaid, can be anywhere in file except frontmatter -->
|
||
<script type="module">
|
||
import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid@10/dist/mermaid.esm.min.mjs';
|
||
mermaid.initialize({ startOnLoad: true });
|
||
</script>
|