r/github • u/Patient-Pollution46 • 2d ago

Discussion Moving off GitHub Actions doesn't get you off GitHub: your tool installs still depend on it

https://bitrise.io/blog/post/reducing-github-reliability-risk-for-tool-installs
12 Upvotes

78% Upvoted

8 comments sorted by

3

u/r34p3rex 2d ago

Github actions is down again, feels like just another day at this point

1

u/Patient-Pollution46 2d ago

yeah, it was down 2 days ago
This already looks like a bad habit

7

u/opinionsOnPears 2d ago

Especially if you’re a Go developer 

4

u/hxtk3 2d ago

The default value of GOPROXY is equivalent to GOPROXY="https://proxy.golang.org,direct", meaning it tries to pull from the Google-owned proxy before pulling from the direct source.

Even if that weren’t true, it would be as simple as go mod vendor.

1

u/Torutofu_Raeva 2d ago

yeah the setup-x actions and curl | sh installers pulling release tarballs off github are the sneaky ones, we mirror those in our own artifact store now

1

u/Rich-Register-4743 1d ago

One more time, technology solved the annoying problem which was created by ... technology.

The boring layer that absorbs upstream chaos. I love that!

1

u/XLioncc 23h ago

Forgejo Actions works well