Ephemeral Cloudflare bypass in GitHub Actions

Ephemeral Cloudflare bypass in GitHub Actions

I really enjoy many of Cloudflare’s services, especially considering that they provide excellent protection for free. You just enable proxying, Bot Fight Mode etc., and chill most of the time. So let’s say you have some public URL which should be protected by Cloudflare, deny all bot traffic and allow only real browser-based traffic. In one of my cases, that was a self-hosted Grafana instance. However, there were a few things I wanted to automate as part of the CI/CD pipeline, including provisioning Grafana resources like data sources, dashboards, alert rules etc. ...

May 6, 2026
Why you should use GitHub repository rules instead of branch protection rules

Why you should use GitHub repository rules instead of branch protection rules

In July 2023, GitHub released a new feature called repository rules. I didn’t pay much attention to it at first, but then I faced multiple cases where branch protection rules felt like “something is missing”, and recently I decided to give repository rules (A.K.A. repository rulesets) a try. I was surprised by how much more flexible and powerful they are compared to traditional branch protection rules, so I wanted to share useful stuff about them, especially for those who haven’t heard of / tried repository rules yet. ...

April 22, 2026