Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
actionsflow
Advanced tools
A free Zapier/IFTTT alternative for developers to automate your workflows based on Github actions
If you like Actionsflow, please vote for us on Product Hunt
The free IFTTT/Zapier alternative for developers to automate their workflows based on Github actions
Actionsflow helps you automate workflows - it's a free IFTTT/Zapier alternative for developers. With Actionsflow you can connect your favorite apps, data, and APIs, receive notifications of actions as they occur, sync files, collect data, and more. We implemented it based on Github actions, and you use a YAML file to build your workflows. The configuration format is the same as Github actions, which makes it easy for you to get going if you've explored Github actions before. You can also use any Github actions as your job's steps.
You can learn more about the core concepts of Actionsflow here.
Full documentation for Actionsflow lives on the website.
You can also view it on Github if you prefer.
Actionsflow uses Github Actions' repository_dispatch
event and scheduled
event every 5 minutes to run Actionsflow triggers. Those triggers generate result items, which are cached and deduplicated, generating a standard Github actions workflow file with the trigger result. Finally, the workflows are executed using act (a tool for running GitHub Actions locally).
To learn more about how Actionsflow works, please see Core Concepts of Actionsflow.
Create a public Github repository by using this link.
A typical Actionsflow repository structure looks like this:
├── .github
│ └── workflows
│ └── actionsflow.yml
├── .gitignore
├── README.md
└── workflows
│ └── rss.yml
│ └── webhook.yml
└── package.json
Create your workflow files inside the workflows
directory
A typical workflow file rss.yml
looks like this:
on:
rss:
url: https://hnrss.org/newest?points=300
jobs:
ifttt:
name: Make a Request to IFTTT
runs-on: ubuntu-latest
steps:
- uses: actionsflow/ifttt-webhook-action@v1
with:
event: notice
key: ${{ secrets.IFTTT_KEY }}
value1: ${{on.rss.outputs.title}}
value2: ${{on.rss.outputs.contentSnippet}}
value3: ${{on.rss.outputs.link}}
For more information about the Actionsflow workflow file, see the Actionsflow workflow reference.
You can find examples and inspiration on the Trigger List and on Awesome Actionsflow Workflows.
Commit and push your updates to Github
Pushing to Github makes Actionsflow run the workflows you defined. You can view logs at your repository's actions tab on Github.
For more information about getting up and running, see Getting Started.
Full documentation for Actionsflow lives on the website.
Whether you're helping us fix bugs, improve the docs, or spread the word, we'd love to have you as part of the Actionsflow community! 💪💜
Check out our Contributing Guide for ideas on contributing and setup steps for getting our repositories up and running on your local machine.
See also the list of contributors who participated in this project.
Licensed under the MIT License.
FAQs
A free Zapier/IFTTT alternative for developers to automate your workflows based on Github actions
The npm package actionsflow receives a total of 31 weekly downloads. As such, actionsflow popularity was classified as not popular.
We found that actionsflow demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.