jb/paseo
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

docs(hub): document workflow security boundaries (#3032)

Browse Source 
* docs(hub): add security guidance for workflows

* docs: register Hub security guide
This commit is contained in:
Mohamed Boudra
2026-08-08 17:22:09 +02:00
committed by GitHub
parent 375d1d6fb8
commit 3d420720c5
9 changed files with 321 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public-docs/hub/configuration/index.md
+2
View File
@@ -81,4 +81,6 @@ While a project uses a GitHub source, the dashboard editor is read-only. The rep
`filters.repo` can name any repository the organization has a connection for. Keeping `hub.yml` in a private repository while triggers watch several public ones is a common setup, because push access to the configuration repository grants access to the organization's connections.
Treat the configuration repository as part of the security boundary. [Hub security](/docs/hub/security) covers what a changed configuration can authorize and how to limit the resulting agent process.
Next: [Hub workflows](/docs/hub/workflows), then the [`hub.yml` reference](/docs/hub/configuration/hub-yml).