Source record

Published by GitHub Changelog (T1 source). The original is at https://github.blog/changelog/2026-07-28-github-actions-holds-unproven-workflows-for-approval.

Pipeline notes

The summary and note below are generated by the signal pipeline — they are Beyond Desk’s reading, not quotations from the source.

GitHub Actions will hold potentially malicious workflows for manual approval on public repositories, aiming to block supply chain attacks that use compromised credentials to push workflows stealing CI/CD secrets.

Concrete new defensive layer for any team running public-repo CI; directly changes how workflow pushes from first-time contributors are handled.

Cited by

No citations on record.