Executing Workflows Should Be a Permission, Not a Default
TL;DR GitHub shipped workflow execution protections to general availability on September 17, 2026, completing an allowlist model for who and what can start an Actions workflow (changelog). GA adds workflow file targeting, Insights, and a REST API — the policy is now manageable as code. GitHub also…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-12 14:00 · DEV Community — AI
Executing Workflows Should Be a Permission, Not a Default