A practical guide to creating and sharing GitHub Copilot plugins that bundle agents, skills, hooks, MCP servers, and other customizations

A centralized reference for .github and .github-private repository features, including required files and visibility on GitHub.com, GHEC, EMU, GHEC with data residency, and GHES

Using a Custom Deployment Protection Rule (GitHub App) to enforce environment promotion ordering and ServiceNow change ticket validation across any workflow, in any repo

Using a required workflow to enforce that all GitHub Actions in your pull requests reference immutable releases, adding a supply chain security gate at the organization or enterprise level

A walkthrough of the tools, workflows, and practices I use to maintain a growing collection of open source JavaScript GitHub Actions

How to include repository custom properties in GitHub Actions OIDC tokens to enable attribute-based access control to cloud environments

Using the new claims matching expression feature in Azure federated credentials to use wildcards with GitHub Actions OIDC subject claims

A GitHub Action to mirror clone repositories between GitHub environments (GitHub.com, EMU, and GitHub Enterprise Server) with support for visibility control, Actions disabling, and archiving

How to use Enterprise GitHub Apps to programmatically install third-party GitHub Marketplace apps across your enterprise organizations

A practical guide to building GitHub Agentic Workflows - AI-powered repository automation authored in Markdown, with real-world examples, troubleshooting tips, and lessons learned