🖼️ UPP – UNIVERSAL PROFILE PICTURE UPDATER FOR GITHUB

Automatically picks any image (SVG, PNG, JPG) from the Pictures/ folder of this repository, converts it to a small PNG (< 1 MB), and sets it as your personal avatar, organization avatars, or all at once.

Fully automated – with 2FA support, a headless browser, and caching for speed.

──────────────────────────────────────────────────────────── ✨ FEATURES

• Mode‑based uploads – p (personal), o:<org> (org), a (all) • Accepts .svg, .png, .jpg, .jpeg – with or without extension • Always converts to PNG, resizing to 400×400 (preserving aspect ratio) and compressing to < 1 MB; SVG files are rendered at high density (300 DPI) • Handles two‑factor authentication (TOTP) automatically • Multi‑target: update personal + multiple organisations in one run • Emoji‑rich logs: ✅ ❌ 🔐 📂 📎 • Debug screenshots saved only on failure (no noisy commits on success) • Fast – Playwright binaries are cached, typical run < 30 seconds

──────────────────────────────────────────────────────────── 🔧 ONE‑TIME SETUP

1. Enable Actions write access

   • Go to Settings → Actions → General
   • Under “Workflow permissions”, select Read and write permissions
   • Save. This lets the workflow push debug screenshots to the repo.

2. Add these secrets (Settings → Secrets and variables → Actions)

   Secret	Description
   GH_LOGIN_USERNAME	Your GitHub username
   GH_LOGIN_PASSWORD	Your GitHub password
   GH_2FA_SECRET	(if 2FA enabled) TOTP base32 setup key
   GH_ORGANIZATIONS	(only for [a] mode) comma‑separated org usernames,

                    example: `myorg1,myorg2`
   

   📌 How to get the TOTP secret Settings → Password and authentication → Authenticator app → Edit → Reconfigure → Click “Setup key” below the QR code → copy the string.

3. Place your images Create a folder named Pictures (if it doesn’t exist) and put your SVG / PNG / JPG files inside. Case does not matter.

──────────────────────────────────────────────────────────── 🚀 USAGE

1. Go to the Actions tab → UPP → Run workflow.

2. In the input field, type the file name and the target mode.

   Format: <filename>[<mode>]

   Modes

   Mode	Meaning
   [p]	Personal account (default if omitted)
   [o:orgname]	Specific organisation
   [a]	Personal + all organisations (needs GH_ORGANIZATIONS secret)

   Combine modes with a comma: logo[p],[o:design]

3. Examples

   • GozoSag[p] → personal avatar from GozoSag.svg
   • icon[o:dev-team] → only org “dev-team” (any extension)
   • banner[a] → personal + every org in GH_ORGANIZATIONS
   • photo.jpg[p],[o:hr] → personal & “hr” org, using photo.jpg

4. Click Run workflow.

   The action will:

   • Look for your file in Pictures/ (if you give an extension, it uses exactly that; otherwise it tries .svg → .png → .jpg → .jpeg)
   • Convert / resize to a small PNG (always reprocessed to ensure the size limit)
   • Log into GitHub (2FA filled automatically if secret is set)
   • Upload the image to every requested profile
   • Save screenshots to Debug/ only on failure (then commit them)

──────────────────────────────────────────────────────────── 📋 LOGS (example)

🚀 Launching browser… 🔐 Entering 2FA code ✅ Logged in successfully 🎯 Uploading to p (https://github.com/settings/profile) 📂 Trying to open upload dialog… 📎 File attached ✅ p updated 🎯 Uploading to o:myorg (https://github.com/organizations/myorg/settings/profile) ✅ o:myorg updated ✅ All targets updated successfully

──────────────────────────────────────────────────────────── 🛠 TROUBLESHOOTING

• “File not found” → Check that the file is inside the Pictures/ folder. If you typed just photo, it searches for photo.svg, then photo.png, then photo.jpg, then photo.jpeg. Use the exact extension to be precise.

• “2FA wrong” → Make sure GH_2FA_SECRET is the base32 setup key (not a 6‑digit code, not the QR image). Time is synced automatically.

• Push / identity errors → Confirm that Actions permissions are set to “Read and write” (Step 1) – this workflow needs to commit debug files.

• For [a] mode → the secret GH_ORGANIZATIONS must contain the exact organisation usernames, separated by commas (no spaces). Example: myorg,another-org

• Slow install → The first run installs Playwright and Chromium. Subsequent runs use a cache and will complete in under 30 seconds.

──────────────────────────────────────────────────────────── 🙏 CREDITS

Build by Plangto and DeepSeek Powered by Playwright, Puppeteer Stealth, and GitHub Actions. TOTP generation uses only Node.js crypto - no external libraries.