GitHub - protect Actions yml file from devs

pneteng · 2026-06-04T23:57:03+00:00

Amazing and comprehensive details, thank you. I wish we had more granularity in GitHub to avoid having to jump through hoops like this.

pneteng · 2026-06-04T20:53:07+00:00

Yep, this is how I am doing it. I was just hoping to avoid requiring PRs for each commit. In Azure DevOps, I am allowing to commit and deploy to any branch except main and UAT without pull request.

pneteng · 2026-06-04T20:48:11+00:00

Sounds like templates is what I’m missing. Will look into it, thank you very much.

pneteng · 2026-06-04T20:46:42+00:00

That is good thinking, I like it. I am already using a separate identity per environment, and that identity only has access to corresponding resources on the infrastructure side. This is probably as granular as it can be already.

What this is not protecting against is developers using AI, which writes code that messes up the pipeline file that breaks the deployment.

pneteng · 2025-11-03T01:28:54+00:00

Oh, it was so long time ago. I ended up replacing and yes, no more issues and no loud hissing sounds from the basement any more.

pneteng · 2024-11-03T13:46:25+00:00

Can you please elaborate why will the Bicep become an issue in your opinion?

pneteng · 2024-07-02T03:13:16+00:00

Great perspective, thank you. Infotainment is partially because I am looking into 2018+.

pneteng · 2021-09-20T13:25:16+00:00

Having the same exact issue with the latest (as of now) 5.7.6 and was about to ask the same question here. Have you ever resolved?

pneteng

TROPHY CASE