Papers about Github actions and Github actions risks, reliability, security, etc.

[bbaudry]

Here we collect research papers related to the project.

[bbaudry]

A dataset of GitHub Actions workflow histories, MSR 2024

Might a good starting point for our dataset

[bbaudry]

The Hidden Costs of Automation: An Empirical Study on GitHub Actions Workflow Maintenance, SCAM 2024

Maintenance challenges are different from vulnerabilities, and tightly related

[bbaudry]

Quantifying Security Issues in Reusable JavaScript Actions in GitHub Workflows, MSR 2024

Another dataset, focused on npm packages for actions

[bbaudry]

Catching smells in the act: A github actions workflow investigation, SCAM 2024

[bbaudry]

On the outdatedness of workflows in the GitHub Actions ecosystem, JSS 2023

Another dataset

[bbaudry]

On the use of GitHub Actions in software development repositories, ICSME 2022

A dataset and study which actions are the most reused

[bbaudry]

On the effectiveness of large language models for github workflows, ARES 2024

Another dataset and LLMs for managing actions

[bbaudry]

Developers' perception of github actions: A survey analysis, EASE 2023

Not directly related to our project

[bbaudry]

Resource usage and optimization opportunities in workflows of github actions, ICSE 2024

recent, not security

[bbaudry]

Toward Automatically Completing GitHub Workflows, ICSE 2024

Transformer-based approach to autocomplete the dev of workflows

[bbaudry]

Automatic Categorization of GitHub Actions with Transformers and Few-shot Learning, ESEM 2024

[bbaudry]

Catching smells in the act: A github actions workflow investigation, SCAM 2024

[bbaudry]

How do developers talk about github actions? evidence from online software development community, ICSE 2024

[bbaudry]

gawd: A Differencing Tool for GitHub Actions Workflows, MSR 2024

[bbaudry]

EGAD: A moldable tool for GitHub Action analysis, MSR 2023