Act
active
GitHub Actions blocks pull_request_target by default Dec 2
- Platform/SRE — Skip
- CI/CD — Act: Audit all public-repo workflows for
pull_request_targettriggers and ensure an explicit Actions event policy allows them before December 2, 2026, or those pipelines will be blocked silently. - Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.