jb/paseo
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

docs(hub): document workflow security boundaries (#3032)

Browse Source 
* docs(hub): add security guidance for workflows

* docs: register Hub security guide
This commit is contained in:
Mohamed Boudra
2026-08-08 17:22:09 +02:00
committed by GitHub
parent 375d1d6fb8
commit 3d420720c5
9 changed files with 321 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public-docs/hub/triggers/index.md
+2
View File
@@ -55,6 +55,8 @@ Each provider page documents its events and the data they expose:
The allowlist is what keeps a stranger's comment on a public issue from starting an agent on your machine. There is no default, because a safe default differs per repository.
An allowlist is one layer of defense. It does not make a permitted account trustworthy after compromise or make prompt injection harmless. See [Hub security](/docs/hub/security) before choosing the daemon, working directory, provider policy, and outputs for an external trigger.
| Filter | Applies to | Matches |
| ------------ | -------------- | --------------------------------------------------------------- |
| `from_users` | all | GitHub: login. Slack and Discord: **user id**, not display name |