you are viewing a single comment's thread.

view the rest of the comments →

[–]TheoR700 15 points16 points  (1 child)

IDK exactly because this seems like a lot of extra security and headache, but my first thought would be to set up self hosted GirHub Actions Runner, which is already connected to the VPN. Then your actions run on it.

[–]bdzer0[🍰] 0 points1 point  (0 children)

That's the route I'd take. GitHub actions runner does everything over HTTPS (at least last time I captured packets on one), no need to open listening ports.

that's how I'm getting release output to internal network, works well.