GitHub Actions holds workflows for approval to prevent attacks

GitHub Actions now holds certain workflow runs for approval before they start to protect public repositories from malicious workflows that steal CI/CD credentials. Workflow runs identified as potentially malicious will not execute until a repository collaborator with write access reviews and approves them. This protection is automatically applied to public repositories on GitHub.com and does not require user configuration.

The approval must be submitted through an authenticated web session, after which the workflow continues normally. This protection currently applies only to public repositories on github.com, and GitHub Enterprise Server does not include this feature at this time.