Skip to content

Commit 2e52950

Browse files
steizajc-clark
andauthored
Clarify that Actions policies never restrict access to local actions (#56059)
Co-authored-by: Joe Clark <31087804+jc-clark@users.noreply.github.com>
1 parent 240eb20 commit 2e52950

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

content/admin/enforcing-policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -77,6 +77,8 @@ When specifying actions{% ifversion actions-workflow-policy %} and reusable work
7777
* To allow all actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} in organizations that start with `space-org`, use `space-org*/*`.
7878
* To allow all actions{% ifversion actions-workflow-policy %} and reusable workflows{% endif %} in repositories that start with octocat, use `*/octocat**@*`.
7979

80+
Policies never restrict access to local actions on the runner filesystem (where the `uses:` path start with `./`).
81+
8082
## Runners
8183

8284
By default, anyone with admin access to a repository can add a self-hosted runner for the repository, and self-hosted runners come with risks:

0 commit comments

Comments
 (0)