GitHub Actions Now Holds Suspicious Workflow Runs Before They Touch Your Secrets

Fri, 31 Jul 2026 19:30:00 +0530

GitHub Actions Now Holds Suspicious Workflow Runs Before They Touch Your Secrets

On July 28, 2026, GitHub started automatically holding workflow runs it identifies as potentially malicious before they execute. If a run gets flagged, it sits in a pending state until a repository collaborator with write access reviews and approves it through an authenticated web session. No settings, no opt-in, no workflow file changes — GitHub applies this to public repositories on github.com by default.

GITHUB_TOKEN on Cloudkaramchari

GitHub Actions Now Holds Suspicious Workflow Runs Before They Touch Your Secrets

GitHub Actions Now Holds Suspicious Workflow Runs Before They Touch Your Secrets