Miau Labs / Insight

GitHub Actions Holds Potentially Malicious Workflows for Approval

GitHub Actions holds potentially malicious workflows for approval to protect public repositories from supply chain attacks. This protection applies to public repositories on github.com only.

Miau Labs reading
GitHub Actions holds potentially malicious workflows for approval to protect public repositories from supply chain attacks. This protection applies to public repositories on github.com only. Para proteger repositórios públicos, o GitHub Actions agora retém certas execuções de fluxo de trabalho para aprovação antes de começar.
Miau Labs reading

GitHub Actions holds potentially malicious workflows for approval to protect public repositories from supply chain attacks. This protection applies to public repositories on github.com only.

Key points
  • GitHub Actions now holds certain workflow runs for approval before they start.
  • The approval must be submitted through an authenticated web session.
  • This protection currently applies to public repositories on github.com only.
Miau Labs takePara proteger repositórios públicos, o GitHub Actions agora retém certas execuções de fluxo de trabalho para aprovação antes de começar.