# GitHub GitHub Actions holds potentially malicious workflows for approval

- Product: GitHub (https://whatsnew.fyi/product/github)
- Vendor: GitHub
- Date: 2026-07-28
- Original notes: https://github.blog/changelog/2026-07-28-github-actions-holds-potentially-malicious-workflows-for-approval
- Permalink: https://whatsnew.fyi/product/github/releases/2026-07-28-github-actions-holds-potentially-malicious-workfl

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

Recent supply chain attacks use compromised GitHub credentials to push malicious GitHub Actions workflows that steal CI/CD credentials and carry out additional attacks. To help protect public reposito…

- **security** — GitHub Actions now holds potentially malicious workflows for approval to protect against supply chain attacks that use compromised credentials to push malicious workflows and steal CI/CD credentials