Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
actionsflow
Advanced tools
The best Zapier/IFTTT free alternative for developers to automate your workflows based on Github actions
The best IFTTT/Zapier free alternative for developers to automate your workflows based on Github actions
Actionsflow helps you to automate workflows, it's the best IFTTT/Zapier free alternative for developers. With Actionsflow, you can connect your favorite apps, data, and APIs, receive notifications of actions as they occur, sync files, collect data, and more. We implemented it based on Github actions, and you use a YAML file (The configuration format is the same as Github actions) to build your workflows. If you have already written a Github actions file, it's very easy to define an Actionsflow workflow file, and you can use any Github actions as your job's steps.
You can see core concepts of Actionsflow at here.
Full documentation for Actionsflow lives on the website.
You can also view it at Github if you prefer.
If you need actionsflow
npm package docs, please see here
Actionsflow uses Github Actions' repository_dispatch
event and per 5 minutes' scheduled
event to run Actionsflow triggers for getting result items, and do some caching and deduplication works, then generating a standard Github actions workflow file with the trigger result, then calling act(a tool for running GitHub Actions locally) to run the built workflow files.
Learn more about How Actionsflow worked, please see Core Concepts of Actionsflow.
Build an Actionsflow workflow is a three-step process:
Create a public Github repository by this link.
A typical Actionsflow repository structure looks like this:
├── .github
│ └── workflows
│ └── actionsflow-jobs.yml
├── .gitignore
├── README.md
└── workflows
│ └── rss.yml
│ └── webhook.yml
└── package.json
Define your workflow file at workflows
directory
A typical workflow file rss.yml
looks like this:
on:
rss:
url: https://hnrss.org/newest?points=300
jobs:
ifttt:
name: Make a Request to IFTTT
runs-on: ubuntu-latest
steps:
- uses: actionsflow/ifttt-webhook-action@v1
with:
event: notice
key: ${{ secrets.IFTTT_KEY }}
value1: ${{on.rss.outputs.title}}
value2: ${{on.rss.outputs.contentSnippet}}
value3: ${{on.rss.outputs.link}}
For more information about the Actionsflow workflow file, see the Actionsflow workflow reference.
You can explore Triggers List or Workflows by Use Case to get more inspired.
commit and push your updates to Github
Then, Actionsflow will run your workflows as you defined, you can view logs at your repository actions tab at Github
For more information about quick started, see Getting Started
Full documentation for Actionsflow lives on the website.
Whether you're helping us fix bugs, improve the docs, or spread the word, we'd love to have you as part of the Actionsflow community! 💪💜
Check out our Contributing Guide for ideas on contributing and setup steps for getting our repositories up and running on your local machine.
See also the list of contributors who participated in this project.
Licensed under the MIT License.
FAQs
A free Zapier/IFTTT alternative for developers to automate your workflows based on Github actions
The npm package actionsflow receives a total of 31 weekly downloads. As such, actionsflow popularity was classified as not popular.
We found that actionsflow demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.