docs(hub): document workflow security boundaries (#3032)

* docs(hub): add security guidance for workflows

* docs: register Hub security guide
This commit is contained in:
Mohamed Boudra
2026-08-08 17:22:09 +02:00
committed by GitHub
parent 375d1d6fb8
commit 3d420720c5
9 changed files with 321 additions and 1 deletions
+3
View File
@@ -48,9 +48,12 @@ A project is one set of environments and triggers. Split your work into projects
3. [Triggers](/docs/hub/triggers)
4. [Workflows](/docs/hub/workflows)
5. [Configuration](/docs/hub/configuration)
6. [Security](/docs/hub/security)
[Quickstart](/docs/hub/quickstart) goes end to end if you would rather start by doing.
If a workflow accepts requests from GitHub, Slack, Discord, or the API, read [Hub security](/docs/hub/security) before giving an agent access to a working directory or output capability.
## Running it
Two ways: [hosted](/docs/hub/hosted) or [self-hosted](/docs/hub/self-hosting). Everything above is the same either way.