Aaaaand may god grant us the power and the will to act

They will probably still try to collect the taxes.

GitHub Actions learnings from the recent nx hack You may have seen recent reporting around the compromise of the nx project. A malicious version of their package was published to npmjs which subsequently published GitHub tokens, crypto wallets and o...

Must read if you are using GitHub Actions

GitHub Actions learnings from the recent nx hack

jessehouwing.net/github-actio...

GitHub Copilot will start training on your interactions GitHub Copilot will start training on your data... You've probably seen this on your LinkedIn timeline in the past few days. Probably with alarming notes that this can't be controlled and that there i...

GitHub Copilot will start training on your data. You've probably seen this on your LinkedIn timeline the past few days. Probably with alarming notes that this can't be controlled and that there is no policy for it.

This simply isn't true.

Let's get this straight:

jessehouwing.net/github-copil...

Introducing Azure DevOps Marketplace tasks and actions: A Complete Rebuild for Speed, Stability, and Security Introducing the Azdo marketplace project. Azure Pipelines tasks and GitHub Actions for publishing to the Azure DevOps marketplace.

Officially introducing the new Azdo Marketplace project. *The* way to publish your Azure DevOps Extensions to the marketplace.

Now available for #GitHub Actions and #Azure Pipelines.

jessehouwing.net/azure-devops...

I contacted marketplace support and got my namespace re-enabled. One time favor.

Will need to disable some tasks.

Deleted Extension Names Are No Longer Reusable · microsoft vsmarketplace · Discussion #1708 We’re updating the Visual Studio Marketplace policy regarding extension names. Effective mid-March, extension names that have been deleted will not be available for reuse, including by the original...

⚠️ If you maintain Azure DevOps extensions, be careful with the unpublish/delete function.

Once deleted, you cannot republish extensions anymore.

This change was silently announced here and activated today.

github.com/microsoft/vs...

Actions Example Checker - GitHub Marketplace Validate examples in documentation against action.yml schemas

github.com/marketplace/...

GitHub Actions Dependency Submission - GitHub Marketplace Submit workflow dependencies to Dependency Graph with composite actions and fork support

github.com/marketplace/...

Actions SemVer Checker - GitHub Marketplace Checks the version tags for your action repository to ensure the correct versions will be picked

github.com/marketplace/...

Jesse in front of a group of fellow MVPs presenting at the MVP2MVP session.

Showing off my #GitHub Actions for GitHub Action.

- Automatic versioning for Actions
- Dependency Submissions for Actions
- Example checker for Actions docs

At the #mvpsummit during the mvp2mvp days.

If you're maintaining a GitHub Action, you should look into these. Link in the comments.

Keep your examples in sync with your Action Last month I added a few more GitHub Actions to the Marketplace and while working on them found that it was easy to forget to update my examples as the implementation of the Action evolved

Last month I added a few more @github.com Actions to the Marketplace and found that it was easy to forget to update my examples as the Action evolved.

So, now I validate the examples against the action.yaml with own action: GitHub Actions Example Checker.

jessehouwing.net/keep-your-ex...

Actions Example Checker - GitHub Marketplace Validate examples in documentation against action.yml schemas

One more crazy @GitHub Actions project! Another one for Actions authors.

This one validates that the examples you use in your docs and action.yaml's description match the implementation.

If you delete or rename (or change the accepted values) inputs, this will warn you.

github.com/marketplace/...

GitHub - jessehouwing/azdo-marketplace: Pipeline tasks for Azure DevOps Extensions Pipeline tasks for Azure DevOps Extensions. Contribute to jessehouwing/azdo-marketplace development by creating an account on GitHub.

Do you maintain an Azure DevOps Extension? Then I need your help!

The past few days I've completely refactored the Azure DevOps Extension Tasks. They're now available for both GitHub Actions as well as Azure Pipelines and completely cleaned up and PREVIEW!

github.com/jessehouwing...

Battling Hallucinations By Paying More My theory: improving LLM output always requires a higher token count and, therefore, cost.

Ever realised that all the techniques we use to battle hallucinations from LLMs come down to: use more tokens, spend more money?

matthijsvdveer.substack.com/p/battling-h...

Automatic versioning for GitHub Actions authors As a maintainer of 3 GitHub Actions, I've always struggled a bit with the versioning of them. GitHub's documentation provides guidance, but no easy way to verify you did everything right. Based on a ...

Versioning of #GitHub Actions still felt like black magic at certain times, especially with the introduction of Immutable Releases, which does not allow much room for mistakes.

I decided to automate the process of validating all of this: jessehouwing.net/github-actio...

Automatic versioning for GitHub Actions authors As a maintainer of 3 GitHub Actions, I've always struggled a bit with the versioning of them. GitHub's documentation provides guidance, but no easy way to verify you did everything right. Based on a ...

Versioning of #GitHub Actions still felt like black magic at certain times, especially with the introduction of Immutable Releases, which does not allow much room for mistakes.

I decided to automate the process of validating all of this: jessehouwing.net/github-actio...

Always a fun moment... or for an auto-update to kick in during. At least we share the same, reboot within 8hrs policy, so at least you can postpone the inevitable until it may hurt a little less.

Personalizing GitHub Codespaces for your account - GitHub Docs You can personalize GitHub Codespaces by using a dotfiles repository on GitHub or by using Settings Sync.

I kind of meant this feature instead:
docs.github.com/en/codespace...

Automatically brings those skills to every codespace you open. And easily integrated in a start-up script to pull them into every workstation you work from.

Can you combine that with the dot folder config as well?

Improved Dependency Submission for GitHub Actions Recently someone brought to my attention that you pin your actions, Security Advisories for GitHub actions do not show up in the Dependency Graph. I set about a solution to solve that problem.

Recently someone brought to my attention that you pin your actions, Security Advisories for GitHub Actions do not show up in the Dependency Graph. I set about a solution to solve that problem.

jessehouwing.net/github-actio...

@github #githubactions #supplychainsecurity

Improved Dependency Submission for GitHub Actions Recently someone brought to my attention that you pin your actions, Security Advisories for GitHub actions do not show up in the Dependency Graph. I set about a solution to solve that problem.

Recently someone brought to my attention that you pin your actions, Security Advisories for GitHub Actions do not show up in the Dependency Graph. I set about a solution to solve that problem.

jessehouwing.net/github-actio...

@github #githubactions #supplychainsecurity

Found a funny bug in Garmin... My Fenix 8 had adjusted to local time in San Francisco after my flight yesterday, but also decided it should still apply European Winter Time. So I woke up to my Phone and my Watch being in disagreement. One more manual sync with Connect fixed it.

@garmin.com

Can go in the box in the attic along with its 18 predecessors.

xkcd in 2025

Xebia at GitHub Universe 2025: AI, Copilot & Enterprise Join Xebia at GitHub Universe 2025 to explore AI, Copilot, and enterprise solutions. Don’t miss demos, sessions, and ways to make an impact.

Use this link to learn more about Xebia or book some time with our team.

events.xebia.com/microsoft/-x...

Banner showing my fave and inviting you to connect at universe.

Join me at #githubuniverse! You can find me at the Xebia booth throughout the event. Don't hesitate to ping me if you want to talk about GitHub Enterprise, Actions Security or rolling out GitHub Copilot in your organization.

#xebia 💜 @github.com 🌉 Universe

Oh yeah. Even worse. Though we didn't need AI for this stupidity.

Yeah... I've had to paste in `utility --help` into the AI multiple times now so it would trust me some parameter did or did not exist.

Even more fun when it's a "hidden" parameter.

And then to convince another human... ARGH!

You can add custom instructions to auto create a [WIP] ... Commit in case of unsaved changes.