Konstantin Tarkus koistya

GitHub Security Notifications for Discord

A practical guide for setting up automated security notifications from GitHub repositories to Discord channels.

Why Security Notifications Matter

Security events in your repositories need immediate attention. This guide helps you configure automated notifications so your team stays informed about:

Vulnerability discoveries and fixes
Security feature bypasses or disabled protections

1. Установить Docker Desktop и текстовый редактор для кода

https://docs.docker.com/engine/install/ — Docker Desktop
https://code.visualstudio.com/download — VSCode Editor

2. Создать папку для проекта, создать там файл `docker-compose.yml`

services:
 ft:

Environment Variables and Secrets

The following demonstrates how to load environment variables and secret values into a software project for local development.

[Step 1]: Create secret records in Google Secret Manager
[Step 2]: Save environment variables and secret references to .env file(s)
[Step 3]: Add a call to loadEnv(environment, options) where you need those variables

Basic Example

Keybase proof

I hereby claim:

I am koistya on github.
I am koistya (https://keybase.io/koistya) on keybase.
I have a public key ASASJaNjk9roFklMXj8X8HgeLDA_sCqiu9xzjv890zVSMQo

To claim this, I am signing this object:

Twitter API v2 Usage Example

Install got and oauth-1.0a NPM dependencies.

import { TwitterClient } from "./twitter";

// Initializes a new Twitter client using OAuth 1.0a credentials
const twitter = new TwitterClient({
 // Twitter App credentials (API key and secret)

Reusable Workflows in GitHub Actions

Assuming you have the root-level main.yml and a couple of reusable workflows main-a.yml and main-b.yml.

Your goal is to run the the workflows A and B automatically as part of the main (root) workflow as well as being able to fire up them manually one by one for different environments.

The top-level (root) workflow would looks something like this:

`.github/workflows/main.yml`

Resources

How to configure Twitter auth using Firebase Auth (a.k.a. Google Identity Platform)?

Create a new app in Twitter Developer Portal
Enable web auth flow, set website homepage, privacy policy, terms of use, and auth callback URLs

	import { identitytoolkit } from "@googleapis/identitytoolkit";

	const { relyingparty } = identitytoolkit({
	version: "v3",
	});

	let nextPageToken = undefined;

	do {
	const res = await relyingparty.downloadAccount({

	<!--
	Craft a meaningful explanation for why this tweak matters and outline the awesome updates you've implemented. Feel free to toss in some snazzy screenshots if you've got 'em. ✨
	-->

	### 🚀 What's new

	- [ ] Some change...
	- [ ]

	### 📣 Special notes for reviewer

	# GitHub Actions Workflow (example)
	# .github/workflows/main.yml

	name: CI/CD

	on:
	push:
	branches: [main]
	tags:
	- "v*"