29
GitHub scam notifications
(programming.dev)
Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!
Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.
Hope you enjoy the instance!
Rules
Follow the wormhole through a path of communities !webdev@programming.dev
https://arstechnica.com/security/2024/02/github-besieged-by-millions-of-malicious-repositories-in-ongoing-attack/
Not even github can fix the problem.
Be aware of it, and don't click any links in the notifications.
I recently started using forgejo and its glorious. I havent tested federation yet but they’re working on it. Github isnt better imo. I‘d suggest folks mirror their github on forgejo by default.
Did exactly this recently and it's been quite good. Forgejo-runner was a bit tricky to setup but overall a great experience.
I‘m not using ci/cd which I suppose runner is? Feel free to elaborate. I‘m eager to learn.
Yeah it's a ci/cd runner, using a tool called "act". I self-host forgejo and the runner is a docker-in-docker container, but one could set it up with the public forgejo as well. It's pretty neat!
Very cool! I will absolutely check that out! Thanks for explaining!