Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
•
YouTube Security VideosNeil Patel: The 3-Search Test For Your Business #shorts(24.09.2026 um 20:04 Uhr)
•
YouTube Security VideosLinus Tech Tips: The One Apple Product I Fanboy Over(24.09.2026 um 20:18 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: One Prompt Builds Your Copilot Agent(24.09.2026 um 20:15 Uhr)
••
Sichere ProgrammierungAI-powered fuzzing with the GitHub Security Lab Taskflow Agent(24.09.2026 um 20:26 Uhr)
•••
Sichere ProgrammierungBuilt an Agentic Fraud Investigator using(24.09.2026 um 20:15 Uhr)
•
Sichere ProgrammierungBuilding a fraud investigator that argues with itself(24.09.2026 um 20:15 Uhr)
••
YouTube Security VideosNeil Patel: The 3-Search Test For Your Business #shorts(24.09.2026 um 20:04 Uhr)
•
YouTube Security VideosLinus Tech Tips: The One Apple Product I Fanboy Over(24.09.2026 um 20:18 Uhr)
•
YouTube Security VideosMicrosoft Mechanics: One Prompt Builds Your Copilot Agent(24.09.2026 um 20:15 Uhr)
••
Sichere ProgrammierungAI-powered fuzzing with the GitHub Security Lab Taskflow Agent(24.09.2026 um 20:26 Uhr)
•••
Sichere ProgrammierungBuilt an Agentic Fraud Investigator using(24.09.2026 um 20:15 Uhr)
•
Sichere ProgrammierungBuilding a fraud investigator that argues with itself(24.09.2026 um 20:15 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Building a GitHub Action for Recurring Project Items

Quick notes on building an automation tool. What I Built GitHub Action "recurring-backlog-item-creator" The YAML config tells the whole story: defaults: project_id: "PVT_kwHOAOKHl84BHgin" target_repo:…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Quick notes on building an automation tool.






What I Built



GitHub Action "recurring-backlog-item-creator"



The YAML config tells the whole story:




defaults:
project_id: "PVT_kwHOAOKHl84BHgin"
target_repo: "Rindrics/recurring-backlog-item-creator"
issues:
- name: "Wash My Cat"
template_file: ".github/ISSUE_TEMPLATE/wash_my_cat.md"
creation_months: [1, 3, 5, 7, 9]
title_suffix: "- {{YearMonth}}"
fields:
Priority: "P1"
Status: "Ready"
- name: "Buy New Shoes"
template_file: ".github/ISSUE_TEMPLATE/buy_shoes.md"
title_prefix: "[{{Year}}]"
title_suffix: "- ({{Month}})"
creation_months: [3, 11, 12]
fields:
Priority: "P2"
Status: "Backlog"
project_id: "PVT_XXXXX" # you can override the default project_id
target_repo: "Rindrics/other-repo" # you can override the default target_repo






The link below will also helpful to understand this action:








Background and Reflection



Creating issues periodically from templates is a common use case.

However, GitHub's existing features become cumbersome when you need:




  • Different creation intervals for each issue

  • Dynamic prefixes/suffixes like [yyyy-MM] in titles

  • Adding issues to projects while setting custom field values



For these requirements, a config file like this solves the problem.



In this action, the core functionality became filtering and validation of the config file

because GitHub GraphQL API enables easy issue creation and project registration.



So I built a tool focused on filtering and validation, implemented in Go.





What Went Well



Validation ensures the action fails if you specify non-existent fields or values in the target project.

This makes it safe to use with confidence.



The config file being self-documenting is also a subtle advantage --- you can see what it does at a glance.



Also, tagpr - thank you as always!





What Could Be Better



I initially organized the code by role within a single main package, thinking it wouldn't grow much.

Even at this scale, changes scattered across multiple files made it somewhat difficult to work with.



To improve cohesion, I only know approaches like port-adapter architecture, which feels like overkill for a tool of this size.

I still don't have a good intuition for the right balance.



The downsides of a single-package structure were minimal.

The simplicity seemed to outweigh any drawbacks.





Where I Got Stuck



Accessing user GitHub projects requires a PAT...!



Until I realized this, I was using a GitHub App token with Project.write repository permission.

This permission likely belongs to the deprecated projects (classic) feature1, and I burned about 3 hours on this...





Future Plans



At v1.0, the filter condition is "month" only, but it could be extended to support "year," "day," and "day of week."




 - name: "Wash My Cat"
template_file: ".github/ISSUE_TEMPLATE/wash_my_cat.md"
creation_months: [1, 3, 5, 7, 9, 11]
creation_day: [10, 20, 30]
creation_day_of_week: ["Mon"]






With this config, issues would be created on odd-numbered months, on days ending in 0, if they fall on Monday.

For such granular conditions, you'd probably set the cron to run daily.









  1. Probably. Reading here and here suggests so. ↩




SOC Incident Playbook: Vulnerability Remediation & Verification
title: Detect Exploitation - Building a GitHub Action for Recurring Project Items
id: 47ce93c2-d313-4fb4-b284-1e99c7f29401
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Building a GitHub Action for R" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Building a GitHub Action for Recurring P.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Building a GitHub Action for Recurring Project Items

Thematisch verwandte Begriffe: Building, GitHub, Action, Recurring · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-57175 | Python Social Auth is a social authentication/registration mechanism. Pr…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel • Rechts: nächster Artikel • unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...
↗ Original-Quelle