GitHub to Block pull_request_target Workflows by Default Starting December 2
MentionsGitHub
GitHub will begin blocking GitHub Actions workflows triggered by pull_request_target in public repositories on December 2, 2026, expanding its protections against a class of CI/CD vulnerabilities that has repeatedly enabled attackers to steal credentials and compromise open source software releases.
Summary from Socket Blog.
Explained
The technology and terms in this story. Learn more
