#github-actions - December 2019 | Slack Archive

jedineeperalmost 7 years ago

@jedineeper has joined the channel

Erik Osterman (Cloud Posse)almost 7 years ago

https://github.blog/changelog/2019-12-19-github-actions-the-runner-is-now-open-sourced

Pierre Humberdrozalmost 7 years ago

I wish they would just add approval gates. 😞

Erik Osterman (Cloud Posse)almost 7 years ago

Yes, agreed. I haven’t found the best way to do this. What I’ve seen so far is to use labels, but there’s no good way to restrict who can add labels if someone has write permission.

Erik Osterman (Cloud Posse)almost 7 years ago

https://julienrenaux.fr/2019/12/20/github-actions-security-risk/