Briefs · Taipei time (GMT+8)

GitHub Actions will block pull_request_target by default in public repos from December 2

一句重點：From December 2, public repositories will need an applicable Actions event policy that permits pull_request_target for the event to run in GitHub Actions.

發生什麼事

GitHub announced a change to Actions defaults in pull_request_target blocked by default December 2. The change covers every public repository and takes effect on December 2, 2026. In those repositories, pull_request_target will be blocked by default unless an applicable Actions event policy explicitly allows it. This is GitHub's official announcement (🗣 self-reported).

01Sources

More briefs →