William Woodruff personal blog
Bypassing GitHub Actions policies in the dumbest way possible
TL;DR : GitHub Actions provides a policy mechanism for limiting the kinds of actions and reusable workflows that can be used within a repository, organization, or entire enterprise. Unfortunately, this mechanism is trivial to bypass . GitHub has told me that they don’t consider this a security issue (I disagree), so…
- Points
- 247
- HN comments
- 119
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyInfrastructure & DevOps2025
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jun 11, 2025 | Bypassing GitHub Actions policies in the dumbest way possible by woodruffw | 247 | 119 |
