2 ms·
> It’s difficult for Enterprise Orgs to ensure only vetted actions are used. You can already to this 1. Visit Settings > Actions > General Actions Permissions
by twistedpair 4y ago
> It’s difficult for Enterprise Orgs to ensure only vetted actions are used.
You can already to this
1. Visit Settings > Actions > General Actions Permissions > Policies
2. Select "Allow non-org actions and reusable workflows"
You can then allow GitHub authored actions, verified publish actions, and OR provide an explicit allow list of actions.