{ "data": { "api_url": "https://londo.me/blog/api/v1/posts/github-actions-beyond-ci.json", "code": { "blocks": 6, "languages": [ "yaml" ] }, "content_html": "

Most people meet GitHub Actions as “the thing that runs tests on pull requests.” But under the hood it’s much more general: a computer that wakes up when something happens, runs whatever you tell it, and goes back to sleep. For public repos, it’s free.

\n

Here are things you can do with it that have nothing to do with CI.

\n

How it works in 30 seconds

\n

A workflow is a YAML file in .github/workflows/. It has:

\n\n

That’s it. Anything you can script, you can trigger.

\n

1. Host a website

\n

This blog is built by Actions. Every push to main builds the site with Hugo and publishes it to GitHub Pages. No server, no bill.

\n
on:\n  push:\n    branches: [main]\n

The official actions/upload-pages-artifact and actions/deploy-pages actions do the publishing.

\n

2. Run things on a schedule

\n

Actions supports cron:

\n
on:\n  schedule:\n    - cron: "0 14 * * 1"   # every Monday at 14:00 UTC\n  workflow_dispatch:        # plus a manual "Run" button\n

Uses: nightly data scrapes, weekly reports, checking whether a website is up, rebuilding a site so “posted 3 days ago” stays accurate.

\n

Know this:

\n\n

3. Keep a file updated automatically

\n

A workflow can edit files and commit them back. For example, a profile README that always lists your latest blog posts:

\n
permissions:\n  contents: write\n\njobs:\n  update:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v7\n      - run: ./scripts/update-readme.sh\n      - run: |\n          git config user.name "github-actions[bot]"\n          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"\n          git add README.md\n          git diff --cached --quiet || git commit -m "Update latest posts"\n          git push\n

The git diff --cached --quiet || part only commits if something actually changed, so you don’t get empty commits.

\n

4. Manage issues and pull requests

\n\n

Triggers like issues, issue_comment, and pull_request make this easy.

\n

5. Build a ChatOps bot

\n

A workflow can react to comments. Someone types /deploy staging on a PR, and a workflow checks their permissions and runs the deploy. Check the comment author’s permission level before doing anything, or anyone on the internet can trigger it.

\n

6. Watch other things on the internet

\n

A scheduled job can:

\n\n

GitHub isn’t built for real-time monitoring, but for “check once an hour and tell me,” it’s plenty.

\n

7. Trigger workflows from outside GitHub

\n

With repository_dispatch, anything that can send an HTTP request with a GitHub token can start a workflow: a script on your server, a webhook from another service, a phone shortcut. The token needs write access to the repo, so treat it like a password.

\n
on:\n  repository_dispatch:\n    types: [rebuild-site]\n

8. Generate release artifacts

\n

Build binaries for Windows, macOS, and Linux in parallel with a matrix, then attach them to a GitHub Release automatically when you push a version tag.

\n
on:\n  push:\n    tags: ["v*"]\n

Things you should know

\n

Least privilege. Set permissions: explicitly in every workflow. Give each workflow only what it needs.

\n

Secrets and forks. Workflows triggered by pull requests from forks don’t get your secrets, on purpose. Be very careful with the pull_request_target trigger: it runs with your secrets and write permissions, and if it checks out and runs the fork’s code, a stranger’s PR can steal your secrets.

\n

Pin actions. A third-party action is someone else’s code running with your permissions. Pin it to a full commit hash rather than a tag if you don’t fully trust the author:

\n
- uses: some-author/some-action@8f4b7f84864484a7bf31766abe9204da3cbe65b3\n

Free isn’t unlimited. Public repos get free minutes on standard runners. Private repos get a monthly allowance, then usage is billed. Check the current limits before you build something heavy.

\n

Closing thought

\n

Think of every repo as coming with a small, free, scriptable computer that listens for events. CI is one thing you can do with it. Your imagination and the terms of service are the rest.

\n", "content_text": "Most people meet GitHub Actions as “the thing that runs tests on pull requests.” But under the hood it’s much more general: a computer that wakes up when something happens, runs whatever you tell it, and goes back to sleep. For public repos, it’s free.\nHere are things you can do with it that have nothing to do with CI.\nHow it works in 30 seconds A workflow is a YAML file in .github/workflows/. It has:\ntriggers (on:): a push, a new issue, a schedule, a button click jobs that run on a fresh virtual machine steps, each either a shell command or a reusable action That’s it. Anything you can script, you can trigger.\n1. Host a website This blog is built by Actions. Every push to main builds the site with Hugo and publishes it to GitHub Pages. No server, no bill.\non: push: branches: [main] The official actions/upload-pages-artifact and actions/deploy-pages actions do the publishing.\n2. Run things on a schedule Actions supports cron:\non: schedule: - cron: \"0 14 * * 1\" # every Monday at 14:00 UTC workflow_dispatch: # plus a manual \"Run\" button Uses: nightly data scrapes, weekly reports, checking whether a website is up, rebuilding a site so “posted 3 days ago” stays accurate.\nKnow this:\nTimes are in UTC. Scheduled runs can start late when GitHub is busy, sometimes by many minutes. Don’t use it for anything that must happen at an exact second. In public repos, scheduled workflows are automatically disabled after 60 days without repository activity. GitHub emails you first. 3. Keep a file updated automatically A workflow can edit files and commit them back. For example, a profile README that always lists your latest blog posts:\npermissions: contents: write jobs: update: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7 - run: ./scripts/update-readme.sh - run: | git config user.name \"github-actions[bot]\" git config user.email \"41898282+github-actions[bot]@users.noreply.github.com\" git add README.md git diff --cached --quiet || git commit -m \"Update latest posts\" git push The git diff --cached --quiet || part only commits if something actually changed, so you don’t get empty commits.\n4. Manage issues and pull requests Auto-label PRs by which files they touch (actions/labeler). Welcome first-time contributors with a friendly comment. Close stale issues after a period of inactivity (actions/stale). Use gently; closing people’s issues automatically can feel rude. Enforce PR title formats for changelogs. Triggers like issues, issue_comment, and pull_request make this easy.\n5. Build a ChatOps bot A workflow can react to comments. Someone types /deploy staging on a PR, and a workflow checks their permissions and runs the deploy. Check the comment author’s permission level before doing anything, or anyone on the internet can trigger it.\n6. Watch other things on the internet A scheduled job can:\ncheck whether your site returns 200 and open an issue if not check whether a dependency released a new version watch a page for changes and notify you GitHub isn’t built for real-time monitoring, but for “check once an hour and tell me,” it’s plenty.\n7. Trigger workflows from outside GitHub With repository_dispatch, anything that can send an HTTP request with a GitHub token can start a workflow: a script on your server, a webhook from another service, a phone shortcut. The token needs write access to the repo, so treat it like a password.\non: repository_dispatch: types: [rebuild-site] 8. Generate release artifacts Build binaries for Windows, macOS, and Linux in parallel with a matrix, then attach them to a GitHub Release automatically when you push a version tag.\non: push: tags: [\"v*\"] Things you should know Least privilege. Set permissions: explicitly in every workflow. Give each workflow only what it needs.\nSecrets and forks. Workflows triggered by pull requests from forks don’t get your secrets, on purpose. Be very careful with the pull_request_target trigger: it runs with your secrets and write permissions, and if it checks out and runs the fork’s code, a stranger’s PR can steal your secrets.\nPin actions. A third-party action is someone else’s code running with your permissions. Pin it to a full commit hash rather than a tag if you don’t fully trust the author:\n- uses: some-author/some-action@8f4b7f84864484a7bf31766abe9204da3cbe65b3 Free isn’t unlimited. Public repos get free minutes on standard runners. Private repos get a monthly allowance, then usage is billed. Check the current limits before you build something heavy.\nClosing thought Think of every repo as coming with a small, free, scriptable computer that listens for events. CI is one thing you can do with it. Your imagination and the terms of service are the rest.", "cover": { "alt": "A terminal printing a scheduled GitHub Actions workflow, above the post title", "height": 630, "url": "https://londo.me/blog/posts/github-actions-beyond-ci/cover.png", "width": 1200 }, "description": "GitHub Actions is a free, event-driven computer attached to every repo. Running tests is just the start.", "headings": [ { "id": "how-it-works-in-30-seconds", "level": 2, "title": "How it works in 30 seconds", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#how-it-works-in-30-seconds" }, { "id": "1-host-a-website", "level": 2, "title": "1. Host a website", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#1-host-a-website" }, { "id": "2-run-things-on-a-schedule", "level": 2, "title": "2. Run things on a schedule", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#2-run-things-on-a-schedule" }, { "id": "3-keep-a-file-updated-automatically", "level": 2, "title": "3. Keep a file updated automatically", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#3-keep-a-file-updated-automatically" }, { "id": "4-manage-issues-and-pull-requests", "level": 2, "title": "4. Manage issues and pull requests", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#4-manage-issues-and-pull-requests" }, { "id": "5-build-a-chatops-bot", "level": 2, "title": "5. Build a ChatOps bot", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#5-build-a-chatops-bot" }, { "id": "6-watch-other-things-on-the-internet", "level": 2, "title": "6. Watch other things on the internet", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#6-watch-other-things-on-the-internet" }, { "id": "7-trigger-workflows-from-outside-github", "level": 2, "title": "7. Trigger workflows from outside GitHub", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#7-trigger-workflows-from-outside-github" }, { "id": "8-generate-release-artifacts", "level": 2, "title": "8. Generate release artifacts", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#8-generate-release-artifacts" }, { "id": "things-you-should-know", "level": 2, "title": "Things you should know", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#things-you-should-know" }, { "id": "closing-thought", "level": 2, "title": "Closing thought", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/#closing-thought" } ], "images": [ { "height": 630, "is_cover": true, "name": "cover.png", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/cover.png", "width": 1200 } ], "license": { "code": "MIT", "writing": "CC-BY-4.0" }, "links": { "external": [], "internal": [] }, "newer": null, "older": { "api_url": "https://londo.me/blog/api/v1/posts/git-internals.json", "slug": "git-internals", "title": "Your .git Folder Is a Database. Let's Read It.", "url": "https://londo.me/blog/posts/git-internals/" }, "published": "2026-10-22T09:00:00-07:00", "reading_time_minutes": 4, "slug": "github-actions-beyond-ci", "source": { "history": "https://github.com/Londopy/blog/commits/main/content/posts/github-actions-beyond-ci/index.md", "markdown": "https://github.com/Londopy/blog/blob/main/content/posts/github-actions-beyond-ci/index.md", "raw": "https://raw.githubusercontent.com/Londopy/blog/main/content/posts/github-actions-beyond-ci/index.md" }, "summary": "Most people meet GitHub Actions as “the thing that runs tests on pull requests.” But under the hood it’s much more general: a computer that wakes up when something happens, runs whatever you tell it, and goes back to sleep. For public repos, it’s free.\nHere are things you can do with it that have nothing to do with CI.\nHow it works in 30 seconds A workflow is a YAML file in .github/workflows/. It has:", "tags": [ { "api_url": "https://londo.me/blog/api/v1/tags/github.json", "name": "github", "slug": "github", "url": "https://londo.me/blog/tags/github/" }, { "api_url": "https://londo.me/blog/api/v1/tags/github-actions.json", "name": "github-actions", "slug": "github-actions", "url": "https://londo.me/blog/tags/github-actions/" }, { "api_url": "https://londo.me/blog/api/v1/tags/automation.json", "name": "automation", "slug": "automation", "url": "https://londo.me/blog/tags/automation/" } ], "title": "Things GitHub Actions Can Do That Aren't CI", "updated": "2026-10-22T09:00:00-07:00", "url": "https://londo.me/blog/posts/github-actions-beyond-ci/", "word_count": 757 }, "meta": { "api": "londopy-blog", "docs": "https://londo.me/blog/api/", "generated": "2026-10-27T05:20:06Z", "self": "https://londo.me/blog/api/v1/latest.json", "version": "1.0.0" } }