Explain decisions

GitHub Actions Academy: Senior interview drills

Practise structured answers covering requirements, risks, controls, evidence and recovery.

Workflow Syntax

What is the difference between a job and a step?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

Contexts

Why can context usage become a security risk?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

Expressions

When should always() be used carefully?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

Secrets and Variables

Why are repository secrets often too broadly scoped?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

Artifacts

Why is immutable artifact promotion safer than rebuilding?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

Caching

What causes stale-cache failures?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

Matrix Builds

When does a matrix create unnecessary complexity?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

Reusable Workflows

How do you prevent breaking all consumers?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

Composite Actions

Composite action or reusable workflow—which fits and why?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

OIDC Federation

How do subject claims limit token abuse?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.

Environments and Deployments

Where should manual approval exist in a mature pipeline?

Answer framework: Clarify requirements → state assumptions → compare options → control risk → validate → explain rollback.