GitHub Actions holds potentially malicious workflows for approval
GitHub Actions now holds certain workflow runs for approval to protect public repositories from supply chain attacks. This feature automatically prevents malicious workflows from executing until a collaborator with write access reviews and approves them via an authenticated web session. This protection is applied automatically and currently only affects public repositories on github.com, not GitHub Enterprise Server.
- →Hold potentially malicious GitHub Actions workflows for manual approval
- →Protection applies only to public repositories on GitHub.com
Security (1) ›
- Hold potentially malicious GitHub Actions workflows for manual approval
GitHub Actions now automatically holds potentially malicious workflow runs for approval to mitigate supply chain attacks. A repository collaborator with write access must review and approve the workflow before it executes.
Notes (1) ›
- Protection applies only to public repositories on GitHub.com
This new security protection is automatically enabled for public repositories on github.com. GitHub Enterprise Server does not currently include this protection.
https://github.blog/changelog/2026-07-28-github-actions-holds-unproven-workflows-for-approval
Related releases
- GitHub Copilot usage metrics now include VS Code Agents activity GitHub Changelog ·
- GitHub Copilot Code Review Gains Auto-Resolution, Smart Commits, and Deeper Analysis GitHub Changelog ·
- GitHub Copilot Weekly Releases: Jira Integration, HydraFusion, and Enterprise Controls GitHub Changelog ·
- GitHub Launches Refreshed Repository Pull Requests Page in Public Preview GitHub Changelog ·
- GitHub AI Scan for PRs: API Management Now in Public Preview GitHub Changelog ·
- Control GitHub Actions Cache Access with cache-mode GitHub Changelog ·