Developer Tools on TechNesthttps://technest.social/developer-tools/Recent content in Developer Tools on TechNestHugoen-USWed, 29 Jul 2026 14:00:00 +0000GitHub Actions Approval Holds: A Maintainer Security Checklisthttps://technest.social/developer-tools/github-actions-approval-holds-maintainer-checklist/Wed, 29 Jul 2026 15:12:48 +0000https://technest.social/developer-tools/github-actions-approval-holds-maintainer-checklist/What changed GitHub announced on July 28, 2026 that GitHub Actions now holds certain workflow runs it identifies as potentially malicious. A held workflow does not start until a repository collaborator with write access reviews and approves it through an authenticated web session. GitHub applies the protection automatically, but only to public repositories on github.com; GitHub Enterprise Server is not covered at this time. GitHub’s announcement That is a useful additional barrier, not a verdict that every unblocked workflow is safe.