GitHub Actions holds potentially malicious workflows for approval
GitHub Actions now holds certain workflow runs for approval to protect public repositories from supply chain attacks. This feature automatically prevents malicious workflows from executing until a collaborator with write access reviews and approves them via an authenticated web session. This protection is applied automatically and currently only affects public repositories on github.com, not GitHub Enterprise Server.
- →Hold potentially malicious GitHub Actions workflows for manual approval
- →Protection applies only to public repositories on GitHub.com
Security (1) ›
- Hold potentially malicious GitHub Actions workflows for manual approval
GitHub Actions now automatically holds potentially malicious workflow runs for approval to mitigate supply chain attacks. A repository collaborator with write access must review and approve the workflow before it executes.
Notes (1) ›
- Protection applies only to public repositories on GitHub.com
This new security protection is automatically enabled for public repositories on github.com. GitHub Enterprise Server does not currently include this protection.
https://github.blog/changelog/2026-07-28-github-actions-holds-unproven-workflows-for-approval
Related releases
- CodeQL 2.26.1 enhances analysis accuracy and framework coverage GitHub Changelog ·
- GitHub Copilot App Usage Metrics Expanded in API GitHub Changelog ·
- npm Adds Publish-Time Malware Scanning and Dual-Use Metadata GitHub Changelog ·
- Grok 4.5 reasoning model available in GitHub Copilot GitHub Changelog ·
- GitHub Actions holds workflows for approval to prevent attacks GitHub Changelog ·
- Dependabot alerts expand to cover malicious packages from OpenSSF GitHub Changelog ·