View, compare, or restore historical versions of this page. Older versions may be automatically deleted based on rules set by your administrator.

  Version Published Changed By Comment Actions
CURRENT (v. 22) Apr 10, 2026 07:30 link to the org-wide allowlist  
v. 21 Apr 10, 2026 07:27 collect workflow scanning tools
v. 20 Mar 02, 2026 18:21
v. 19 Feb 27, 2026 15:19 recommend what to do instead of pull_request_target
v. 18 Jan 10, 2025 08:48
v. 17 Jan 06, 2025 07:32
v. 16 Jan 06, 2025 07:25
v. 15 Dec 05, 2024 12:03 fixing workflows triggered by workflow_run
v. 14 Dec 05, 2024 12:02 consolidate some advice, add section on fixing workflows
v. 13 Nov 27, 2024 14:58
v. 12 Nov 27, 2024 13:56
v. 11 Nov 27, 2024 10:06
v. 10 Nov 27, 2024 09:58 Added caveats and examples for use of artifacts in on_workflow triggered workflows
v. 9 Nov 04, 2024 13:06 link to technique for switching to the PR on issue comments that doesn't have a race condition
v. 8 Nov 04, 2024 09:55
v. 7 Sep 18, 2024 15:16 don't use github.event.pull_request.head.ref
v. 6 Sep 18, 2024 14:46 clarify relationship with policy
v. 5 Sep 18, 2024 13:59 workflow approval
v. 4 Sep 18, 2024 13:40 on_workflow
v. 3 Sep 18, 2024 10:48
v. 2 Sep 18, 2024 09:44
v. 1 Sep 18, 2024 09:43

Return to Page Information