GitHub 因不良的临时贡献者而禁止了我们(OSS)组织的 CI
4 分•作者: BlueMatt•4 个月前
几周前,出于未知原因,Github 决定禁用我们开源组织(lightningdevkit)的所有 Github Actions(包括自托管运行器)访问权限。由于我们中的一些人恰好在一家拥有大型 Github 企业账户的公司工作,我们尝试通过公司代表进行申诉。他们告知我们,问题似乎是由于一些非组织成员的临时贡献者被标记为使用 Actions 进行加密货币挖矿。由于该组织并不在我们的企业账户下,我们不得不等待几周才能收到解除禁令的回复……结果却被告知我们“似乎参与了违反”Github 服务条款的活动。然后他们列举了一些违反服务条款的活动示例,但我们并未进行任何一项,而且该组织本身显然也没有在 CI 中运行任何类型的挖矿。
鉴于我们已经有很多理由要放弃 GitHub(宕机、网站在过去十年中因客户端 JavaScript 大幅增加而功能没有新增但速度却持续变慢、PR 评论超过 50 条后无法加载、贡献者被禁用(并非因加密货币挖矿)导致有用的 PR 被搁置、支持响应缓慢等等),这更多的是给其他人一个警告,而不是任何寻求帮助的尝试。
当然,Github 近来因涌入大量 AI 代理账户导致垃圾信息和其他垃圾内容激增而陷入困境,我对此深表同情。但这并不意味着我们必须使用他们(历史上非常出色)提供的免费产品,我们也可以……不使用。
对于那些不知道的人来说,codeberg/self-hosted forgejo 可以导入整个 GitHub 仓库,包括历史问题和 PR、评论等。
查看原文
A few weeks ago, Github decided to disable all Github Actions (including self-hosted runners) access for our open source org (lightningdevkit) for some unknown reason. As some of us happen to work for a company with a large Github corporate account, we tried to escalate through our corporate reps, who informed us that the issue appeared to be some drive-by contributors who weren't org members being flagged for using Actions to do crypto-mining. As the org isn't technically in our corporate account, we then had to wait a few weeks to get a response back on getting unbanned...only to be told that we "appeared to have been taking part in activity which goes against" Github's ToS. They then listed some examples of ToS-violating activities, none of which we've done, and the org itself obviously wasn't running any kind of mining in CI.<p>As we'd already had plenty of reasons to move off of GitHub (downtime, a website that has gotten consistently slower due to massive increases in client-side JS without new features over the past decade, PRs that won't load once they get past 50 comments, contributors getting banned (without crypt-mining) leading to potentially-useful PRs getting black-holed, slow support, etc, etc), this is more of a warning for others than any kind of attempt to get help.<p>Of course Github is struggling these days with an influx in AI Agent accounts driving a huge increase in spam and other garbage, so I sympathize a lot with the folks over there. But none of that means we have to use the (historically excellent) free product they're offering, we can also...not.<p>For those who weren't aware, codeberg/self-hosted forgejo can import entire github repos including historical issues and PRs, comments, etc.