Workflows, actions, and keyless cloud deployments
Day 1
Workflows, Actions & Security
- GitHub Actions concepts: Workflows, jobs, steps, runners, contexts — the execution model explained
- Triggers: push, pull_request, schedule, workflow_dispatch, workflow_call — choosing the right event
- Jobs and steps: needs dependencies, matrix strategy, concurrency groups — structuring complex workflows
- Reusable workflows: Inputs, outputs, secrets passing — sharing workflows across repositories
- Composite actions vs JS actions vs Docker actions: When to build a custom action and which type to choose
- Secrets and variables: Repository, environment, organization scope — secrets management hierarchy
- OIDC: Keyless authentication to AWS, Azure, and GCP from Actions — eliminating long-lived credentials
- Caching: actions/cache for npm, Maven, Gradle, pip — proper cache key strategies for fast workflows
- GitHub Packages: Publishing container images and packages to the GitHub registry
- Self-hosted runners: Registration, labels, ephemeral runners with GitHub Actions Runner Controller
What your team walks away with
Complete GitHub Actions fluency: from simple build-test pipelines to secure, reusable workflows with OIDC-based cloud deployments.
- Write efficient workflows with matrix builds and proper cache strategies
- Extract and share reusable workflows across repositories
- Set up OIDC-based keyless cloud authentication — no long-lived secrets
- Deploy self-hosted runners with the Runner Controller for Kubernetes
Book the GitHub Actions training
A focused one-day training — can be extended to 2 days for teams wanting GitOps deployment patterns included.
Get in touch