GitHub Actions will hold a suspicious workflow for approval instead of running it

After a run of supply-chain attacks that used stolen GitHub credentials to push workflows which steal build-pipeline secrets, GitHub Actions now holds potentially malicious workflows on public repositories for approval before they execute. It ships alongside a second supply-chain change the same day: Dependabot alerts now ingest malware advisories from the OpenSSF malicious-packages database, widening ecosystem coverage.

What it means The attack this blocks is the cheapest full compromise of a build pipeline there is: hold a token, push a workflow, harvest every other secret the pipeline owns.