Miau Labs / Insight

GitHub Actions Holds Potentially Malicious Workflows for Approval

GitHub Actions now holds potentially malicious workflows for approval to protect public repositories from supply chain attacks. This protection is applied automatically to public repositories on github.com.

Miau Labs reading
GitHub Actions now holds potentially malicious workflows for approval to protect public repositories from supply chain attacks. This protection is applied automatically to public repositories on github.com. Para proteger repositórios públicos de ataques de cadeia de suprimentos, o GitHub Actions agora mantém fluxos de trabalho potencialmente maliciosos para aprovação.
Miau Labs reading

GitHub Actions now holds potentially malicious workflows for approval to protect public repositories from supply chain attacks. This protection is applied automatically to public repositories on github.com.

Key points
  • GitHub Actions now holds potentially malicious workflows for approval
  • This protection is applied automatically to public repositories on github.com
  • GitHub Enterprise Server doesn't add this protection at this time
Miau Labs takePara proteger repositórios públicos de ataques de cadeia de suprimentos, o GitHub Actions agora mantém fluxos de trabalho potencialmente maliciosos para aprovação.