Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
actionsflow
Advanced tools
The best Zapier/IFTTT free alternative for developers to automate your workflows based on Github actions
The best IFTTT/Zapier free alternative for developers to automate your workflows based on Github actions
Actionsflow helps you to automate workflows, it's the best IFTTT/Zapier free alternative for developers. With Actionsflow, you can connect your favorite apps, data, and APIs, receive notifications of actions as they occur, sync files, collect data, and more. , We implemented it based on Github actions, and you use a YAML file (The configuration format is the same as Github actions) to build your workflows. If you have already written a Github actions file, it's very easy to define an Actionsflow workflow file, and you can use any Github actions as your job's steps.
You can see core concepts of Actionsflow at here.
Full documentation for Actionsflow lives on the website.
You can also view it at Github if you prefer.
If you need actionsflow
npm package docs, please see here
Actionsflow setup a Github scheduled action with running every 5 minutes, Actionsflow will check if there are any updates with the triggers in the workflows, if Actionsflow found an updated item, it will generate a standard Github actions workflow file with the item payload, and call act to run the built workflow.
Build an Actionsflow workflows is basically a three-step process:
workflows
directory, you can find some workflow file examples at hereThen, Actionsflow will run your workflows as you defined, you can view logs at your repository actions tab at Github
For more information about quick started, see Getting Started
A typical Actionsflow repository structure looks like this:
.
āāā .github
āĀ Ā āāā workflows
āĀ Ā āāā actionsflow-jobs.yml
āāā .gitignore
āāā README.md
āāā workflows
āāā rss2ifttt.yml
āāā webhook2ifttt.yml
Take a look with the Actionsflow official template repository
A typical workflow file xxx.yml
looks like this:
on:
rss:
event: new_item
url: https://hnrss.org/newest?points=300
jobs:
ifttt:
name: Make a Request to IFTTT
runs-on: ubuntu-latest
steps:
- uses: actionsflow/ifttt-webhook-action@v1
with:
event: notice
key: ${{ secrets.IFTTT_KEY }}
value1: ${{on.rss.outputs.title}}
value2: ${{on.rss.outputs.contentSnippet}}
value3: ${{on.rss.outputs.link}}
For more information about the Actionsflow workflow file, see the Actionsflow workflow reference.
For more information about the Actionsflow triggers, see Triggers
For more information about use cases, see Examples.
For more questions about Actionsflow, see FAQs
Whether you're helping us fix bugs, improve the docs, or spread the word, we'd love to have you as part of the Actionsflow community! šŖš
Check out our Contributing Guide for ideas on contributing and setup steps for getting our repositories up and running on your local machine.
See also the list of contributors who participated in this project.
Licensed under the MIT License.
FAQs
A free Zapier/IFTTT alternative for developers to automate your workflows based on Github actions
The npm package actionsflow receives a total of 31 weekly downloads. As such, actionsflow popularity was classified as not popular.
We found that actionsflow demonstrated a not healthy version release cadence and project activity because the last version was released a year ago.Ā It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.