Workflow Execution Protections is another ✨ security ship from the GitHub Actions team: Control who and what triggers GitHub Actions workflows. For example you can use this new feature to restrict or prohibit pull_request_target across your organization. https://lnkd.in/gbBGgcwp
Today we shipped Workflow Execution Protections for GitHub Actions, a core component of our 2026 security roadmap Gregory OseGregory Ose and I published in March. Built on GitHub's ruleset framework, Workflow Execution Protections give administrators the ability to control who can trigger workflows and which events are permitted to run them. These policies can be enforced consistently across enterprises, organizations, and repositories. This gives organizations a centralized way to govern workflow execution and reduce risk from commonly abused triggers such as pull_request_target. I'm incredibly proud of what the team accomplished here. A huge thank you to the Actions engineering team for their partnership in bringing this feature to life over the past several months. Changelog 👉 https://lnkd.in/gzx9g2zT
