docs.github.com

Configure Dependabot to group related dependency updates into a single pull request using groups in dependabot.yml

Migrate a GitHub Actions workflow off the deprecated cache service to a current actions/cache release on the rewritten cache service

Approve or reject a GitHub Actions deployment via the custom deployment protection rule review API

Author a custom secret scanning regex pattern at the GitHub organization level, validate it with a dry run, then publish and enable it for push protection

Enable GitHub secret scanning push protection organization-wide using the code security configurations API

List, triage, and resolve GitHub secret scanning alerts via the REST API

Upload third-party static analysis results to GitHub code scanning via the SARIF upload API and triage alerts

List and dismiss GitHub Dependabot alerts across a repository and organization via the REST API

Write a GitHub Actions workflow that uses a reusable workflow with secrets inheritance and outputs to gate a downstream deploy job

Write a GitHub Actions composite action that runs linting, testing, and SBOM generation as reusable steps and publishes the composite action to a shared internal repository

Publish GitHub artifact attestations using the actions/attest-build-provenance action and verify them

List and delete specific package versions from the GitHub Container Registry (GHCR) for an organization using the GitHub REST API

Use the GitHub Actions concurrency queue: max parameter to serialize workflow runs without cancellation

Run macOS CI jobs on GitHub-hosted and self-hosted macOS runners with correct Xcode configuration

Collect CI cost and duration telemetry using the GitHub Actions workflow run API and OpenTelemetry

Configure GitHub larger runners for a repository or organization

Configure GitHub merge queue for a protected branch

Harden self-hosted runners with ephemeral mode and just-in-time (JIT) provisioning

Understand and manage GitHub Actions cache storage limits and eviction behavior

Implement path-filtered CI triggers in a monorepo with GitHub Actions

Manage GitHub Actions artifact retention and understand the v4 upload/download actions

Register a GitHub Actions self-hosted runner with custom labels and target it from a workflow

Structure GitHub Actions reusable workflows (workflow_call) for cross-repository sharing

Enforce required CI workflows across an organization using GitHub rulesets

Deploy GitHub Actions runner scale sets on Kubernetes with Actions Runner Controller (ARC)

Configure GitHub Actions concurrency groups to cancel superseded workflow runs

List organization-wide secret scanning alerts via the GitHub REST API

Configure GitHub secret scanning push protection and audit bypass requests via REST API

Enable secret scanning for all repositories in a GitHub organization via the REST API

Attest and verify a container image with GitHub Artifact Attestations

Define and consume a GitHub Actions reusable workflow via workflow_call

Configure GitHub branch protection rules and repository rulesets via API

Generate a GitHub App installation access token for API authentication

Trigger a GitHub Actions workflow_dispatch event via the REST API

Create and update GitHub Deployments with environment tracking via API

Understand and configure GitHub merge queue for CI gating

Retrieve GitHub code scanning and Dependabot alerts via the REST API