Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects, and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Mouseww
Prometheus
Repository navigation
Code
Issues
2
(2)
Pull requests
Actions
Projects
Security and quality
Insights
More
items
Releases
v0.28.2
Prometheus v0.28.2
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
No results found
github-actions
released this
04 Nov 10:06
v0.28.2
6d63885
修复
流程步骤「被运行环境拒绝」却看不出来
:步骤都是无人值守运行,没人能中途点「允许」,所以权限没覆盖的调用会被直接拒绝。以前这种情况只是被 agent 在报告里提一句,运行记录仍显示「成功」,看着像跑完了其实少做了事
现在每次被拒的调用都会记录下来(工具名 + 原因),随运行结果返回
该步骤会带上被拒清单,整次运行在历史里显示一条「有步骤因权限不足被拒」的警告,写明是哪几个步骤、各被拒几次
被拒时的提示也改成说清楚「这一步需要什么权限」,不再只说 not permitted
整条流程没法一次性提权
:以前只能逐个节点改权限
运行对话框新增「步骤权限」:默认「按每个步骤自己的设置」,也可以选只读 / 可编辑 / 完全,本次运行的所有步骤都用它(子流程一并继承)
定时运行不受影响,仍按各步骤自己的权限
内置模板「缺陷排查与修复」的「修复并验证」步骤权限给低了
:它的指令要求跑测试,权限却只有「可编辑」(不能执行命令),必然被拒 → 改为「完全」
AI 生成流程时
,生成指南现在明确说明:要跑构建 / 测试 / 脚本的步骤必须给「完全」,否则命令会被拒绝;只读调研才用「只读」
说明
三档权限的界线没有变(只读 = 看;可编辑 = 改文件但不能执行命令;完全 = 也能执行命令)。配置文件编辑器里现在直接写出每档的能力,不再只给一个词
无人值守运行时,安装插件仍然永远需要人确认,任何档位都不会放行
若你用的是桌面安装版,需要更新到本版本才生效;源码运行的话重新构建前端与服务端即可
You can’t perform that action at this time.