GitHub

“Github made a change recently that the default will be enabled unless you configured it preemptively.”

“I watched a YouTube video that said if you want to get your first job as a machine learning engineer, you should do volunteer work, especially in GitHub repositories, but I'm not entirely sure this is true, and if it is, where can I find these repositories that require this kind of work?”

“Just like I told you before fix your shit (github actions) and maybe we can start talking again.”

“At this point I’m not sure I trust GitHub at all”

“Yeah, all my OSS projects are on GitHub actions, and pretty much all departments at work use GH too. When GH goes down we chill”

“- rules to always run github workflow commands locally to save time on the PR”

“Why not just chat on GitHub.com? Some people say that it sometimes refuses to go “off topic” (non coding stuff) but I think that’s pretty rare.”

“AI is decent at writing code but excellent at reviewing it - doesn't sleep, reads 500-line diffs, catches nitpicks so humans focus on architecture.”

“@pierceboggan @burkeholland Ah, GitHub Copilot, my 💸💸💸 friend…”

“Your fallback is to make sure you can build locally. That means moving more of your logic and build steps into scripts that are called by the GitHub YAML instead of baking it directly into the YAML.”

“Do you actually trust GitHub Actions for production?”

“Third party agents need to be enabled by an admin in the "AI controls" settings in github.com, it's not enabled by default I think.”

“NVIDIA just released a repo that scans AI agent skills for security risks BEFORE you run them, which matters more than people realize now that everyone's installing random tools, skills, and MCPs from GitHub.”

“Anyone here that can explain, why the github web searches and fetch request are so slow for me? It seems like they are being rate limited really hard.”

“How could I setup Claude code to use github copilot models?”

“if you are doing environment specific deployments though upon approved PR, then you should definitely move to the next level of isolation to declare your github environments to correspond, and use those for the federated identity”

“365 subs don't include GitHub Copilot benefits, and partner subscriptions treat it as a separate benefit and not included in many of the lower subscriptions.”

“My understanding was that it is supposed to have tight integration with GitHub so that I can work on my GitHub repos. I have connected it to both my enterprise and personal account, but I am not able to browse/view my repos using any of the accounts.”

“GitHub Copilot is still managed entirely through GitHub's platform, so you still need a dedicated GitHub Copilot subscription (Individual, Business, or Enterprise) to use it in your IDE. None of the M365 perks or tokens carry over.”

“Does that mean if you have a 365 Premium subscription you can somehow utilize that with GitHub Copilot since the GitHub Copilot extra license is gone as well.”

“On each GitHub Actions / GitLab CI run the platform provides the run with a short lived JWT that contains all the info about the run. You take that, throw it at Vault, Vault verifies it's really from GH/GL, and is on an approved project/branch/committer/whatever, and then allows you access or not.”

“In the meantime, if you're using the Copilot CLI, you”

“I'm temperamentally unimpressed by Rube Goldberg machines so I do not subscribe to the viewpoint that because Github Actions *can* be used to drive complex processes that they *should* be used to drive complex processes. Complex processes are invariably a consequence of engineering deficiencies elsewhere in the system.”

“For GitHub copilot, OpenAI models cache for 30 mins and Anthropic’s only 5 minutes.”

“Look at the GitHub oidc docs for token claims. These are part of what is passed and determines access, as you configured the role in vault.”