Plan
archived
GitHub Actions workflow execution protections reach GA
- Platform/SRE — Skip
- CI/CD — Plan: Workflow execution protections are now GA for GitHub Enterprise, orgs, and repos; schedule adoption of allowlist controls to restrict who can trigger workflows as a supply-chain hardening step this quarter.
- Leader — Plan: This GA feature enables org-wide policy on who may trigger GitHub Actions workflows; evaluate adding it to your golden-path security standards and internal developer platform requirements.
- Signals: GA announcement
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.