That kind of attitude is why we can't have nice things. First of all, every cloud platform allows you to spin up VMs to upload your arbitrary code and execute it on their server. I mean that's the definition of cloud VMs. But, you normally pay for it. Github is nice in that it gives you 2000 minutes/month of "actions" runtimes (which is exactly that, spinning up a VM to run a workflow, which is normally intended to do things like running your repo test suite against the PR branch) even for free accounts for public repos. That's been great for open source development, but, there is a way to abuse github's free resources - make a PR that adds a cryptomining workflow. Hopefully Github willl figure out a way to stop the abuse without blocking this very useful service they are providing.
That free VM time is nice I guess, but way beyond what you can expect from a free repository. I think it is entirely reasonable if people have to set up their own test environment.
So you don't like useful tooling. Especially for free. You'd prefer an open source project for example to pay for cloud VM servers to set up a CI pipeline instead of using a free github tool that's quite easy to set up?
"Who alone has reason to *lie himself out* of actuality? He who *suffers*
from it."
-- Friedrich Nietzsche
wait what? (Score:5, Insightful)
Wait, you let people upload arbitrary code to your servers and then execute it? and now you wonder why people uploaded malicious code?
Re:wait what? (Score:5, Insightful)
That kind of attitude is why we can't have nice things.
First of all, every cloud platform allows you to spin up VMs to upload your arbitrary code and execute it on their server. I mean that's the definition of cloud VMs. But, you normally pay for it.
Github is nice in that it gives you 2000 minutes/month of "actions" runtimes (which is exactly that, spinning up a VM to run a workflow, which is normally intended to do things like running your repo test suite against the PR branch) even for free accounts for public repos. That's been great for open source development, but, there is a way to abuse github's free resources - make a PR that adds a cryptomining workflow.
Hopefully Github willl figure out a way to stop the abuse without blocking this very useful service they are providing.
Re: (Score:1)
That free VM time is nice I guess, but way beyond what you can expect from a free repository. I think it is entirely reasonable if people have to set up their own test environment.
Re: (Score:1)
So you don't like useful tooling. Especially for free. You'd prefer an open source project for example to pay for cloud VM servers to set up a CI pipeline instead of using a free github tool that's quite easy to set up?