Github on stuartleeks.com

GitHub EntraID Federated Credentials With Merge Queue

Thu, 08 May 2025 15:00:23 +0100

Huge thanks to Mani for how to get this working!

Introduction

I often have GitHub workflows that deploy resources to Azure. In the past, I have created a service principal and use the client secret to authenticate to Azure. This isn’t ideal as if the client secret is leaked then it can be used to access the Azure resources. Additionally, the client secret needs to be rotated periodically which can be a pain (yeah, I’m lazy!).

VS Code Dev Containers and Continuous Integration

Thu, 08 Jul 2021 20:21:12 +0000

Background

Visual Studio Code has a cool feature called dev containers and I’ve got a number of posts about them (and even included a chapter on them in my book on Windows Subystem for Linux (WSL)).

Dev containers allow you to encapsulate the tools/dependencies that your project needs in a container image meaning you can replace the README steps for tool installation that you’d have to manually work through with a Dockerfile that automates it. This makes it much quicker to onboard someone to your project, ensures consistent tooling across the team, and isolates tools in the container making it easier to work with different versions of tools across different projects.

Fun with WSL, GitHub CLI and Windows Notifications

Thu, 27 May 2021 13:42:16 +0100

Introduction

In the last post we saw how to create a drop-in replacement for notify-send. This allowed us to take a script that used notify-send and run it without modification. In this post, we’ll take a look at how we can update that script to take better advantage of Windows notifications.

At the end of that post, the notification was fairly generic as shown below:

Fun with WSL, GitHub CLI and Windows Notifications

Thu, 27 May 2021 07:10:16 +0100

Introduction

I’ve been making use of the GitHub CLI and finding it a productive way to work with GitHub. Recently, Lawrence Gripper shared with me a handy alias that he had set up:

alias ghrun="gh run list | grep \$(git branch --show-current) | cut -d$'\t' -f 8 | xargs gh run watch && notify-send 'Run finished'"

This ghrun alias finds the latest GitHub actions workflow for the current branch and starts a gh run watch for it. This shows the progress through the steps of a workflow: