Ideas for actions

[ezzatron]

• Token provisioning
  • https://shopify.engineering/automatically-rotate-github-tokens
  • https://web.archive.org/web/20230316165521/https://shopify.engineering/automatically-rotate-github-tokens
  • Repos can request tokens to be added as secrets (Actions/Codespaces/Dependabot) by declaring them in a YAML file
  • Allows devs who don't have access to see the secrets to at least know what's available
  • Central repo:
    • Hosts a scheduled workflow that handles:
      • Creating and rotating the declared tokens
      • Opening issues when the declaration has problems.
    • Implements permission boundaries
      • What permissions can a repo have, and for what repos can it have them
    • Defines "templates" for tokens
    • Has access to the credentials to act as a GitHub App installation
• Merge on empty terraform plan
  • https://github.com/ghalactic/repos/blob/main/.github/workflows/renovate-terraform.yml
• Action tagger
  • Major tags
  • SemVer-based
  • Tackle this issue:
    • https://github.com/orgs/community/discussions/7941
    • Add marketplace publish flag -p to cli 'release' tool cli/cli#5193 (comment)
• Homebrew tap from GitHub releases