3 ms·
I'm using tmate for this: https://github.com/mxschmitt/action-tmate https://github.com/mxschmitt/action-tmate
by stabbles 9mo ago
I'm using tmate for this: https://github.com/mxschmitt/action-tmate https://github.com/mxschmitt/action-tmate
- Etheryte 9mo agoThis is the only reasonable way to ever do this, requires no effort, just copy paste one of the examples and you're done. My only gripe is that the most secure option isn't the first example in the repo. Limit access to the actor and put it behind the debug only flag and you're good to go. Still, I remove it after the fact once I don't need it anymore since it feels a bit too sketch with secrets available.
- gorjusborg 9mo agoI'll second this. I've used this action to debug builds, and it works beautifully. However, I've had to stop because the action isn't a 'verified' action and corporate policy. I'd love to see github themselves offer something like this.
- SamuelAdams 9mo agoThe neat part is you can do whatever you want in a GitHub action, corporate policy be damned. So: git clone <tmate / banned action git URL> cd <the action> Run the action start point. Apparently this is a feature, not a security risk. https://blog.yossarian.net/2025/06/11/github-actions-policies-dumb-bypass https://blog.yossarian.net/2025/06/11/github-actions-policie...
- theK 9mo agotmate.io returns a 503. Hugged to death by your comment?
- efrecon 9mo agoI have written https://github.com/efrecon/sshd-cloudflared https://github.com/efrecon/sshd-cloudflared to solve the same problem. It provides you with an SSH connection inside a transient cloudflare tunnel. The connection is only accessible to the SSH public keys stored in your GitHub account.