Title: GitHub Actions Security  
Author: Unknown User (engelen) Sep 18, 2024
Last Changed by: Unknown User (engelen) Apr 10, 2026
Tiny Link: (useful for email) https://cwiki-test.apache.org/confluence/x/fgstEw
Export As: Word  
Incoming Links
Builds (1)
    Page: GitHub Actions status
Hierarchy
Parent Page
    Home page: Index
Labels
There are no labels assigned to this page.
Recent Changes
Time Editor  
Apr 10, 2026 07:30 Unknown User (engelen) View Changes
link to the org-wide allowlist
Apr 10, 2026 07:27 Unknown User (engelen) View Changes
collect workflow scanning tools
Mar 02, 2026 18:21 Unknown User (potiuk) View Changes
Feb 27, 2026 15:19 Unknown User (engelen) View Changes
recommend what to do instead of pull_request_target
Jan 10, 2025 08:48 Unknown User (potiuk)  
Outgoing Links
External Links (23)
    https://infra.apache.org/release-signing.html#automated-rel…
    https://docs.github.com/en/actions/security-for-github-acti…
    https://docs.github.com/en/actions/managing-workflow-runs-a…
    https://infra.apache.org/github-actions-policy.html
    https://github.com/apache/tooling-agents/tree/main/repos/ap…
    https://github.com/apache/nuttx/blob/master/.github/workflo…
    https://www.synacktiv.com/en/publications/github-actions-ex…
    https://github.blog/changelog/2021-04-20-github-actions-con…
    https://woodruffw.github.io/zizmor/
    https://github.com/apache/infrastructure-actions/?tab=readm…
    https://securitylab.github.com/resources/github-actions-pre…
    https://github.com/actions/labeler
    https://docs.github.com/en/actions/reference/authentication…
    https://github.com/apache/airflow/pull/45266
    https://github.com/kaxil/boring-cyborg
    https://docs.github.com/en/actions/reference/events-that-tr…
    https://github.com/apache/infrastructure-actions/tree/main/…
    https://github.com/apache/camel/blob/66fbdcd2c71a6588bacd7b…
    https://github.com/apache/infrastructure-gha-workflow-scann…
    https://github.blog/security/application-security/how-to-se…
    https://github.com/apache/nuttx/blob/master/.github/workflo…
    https://docs.github.com/en/actions/reference/events-that-tr…
    https://docs.github.com/en/actions/reference/events-that-tr…