Tag

#least-privilege

Tagged “least-privilege”

4 articles

GitHub Agentic Workflows hits GA, and the agent now lives inside your Actions permission model

GitHub Agentic Workflows, the open source GitHub Next project that runs coding agents inside GitHub Actions, is now generally available. Workflows are written as natural-language Markdown and compiled to standard Actions YAML, so agent steps inherit runner groups, policies and read-only defaults.

Oct 31, 2026 · Tomás Vega Security & supply chain

A semicolon in a Codex branch name leaked its GitHub token. Scope decided the damage

BeyondTrust's Phantom Labs found that OpenAI Codex passed branch names into a shell without sanitizing them, so a single semicolon could exfiltrate the task's GitHub OAuth token. The bug is fixed, but agents still commonly hold over-scoped, long-lived credentials, and that is what made it dangerous.

Oct 3, 2026 · Maya Okonkwo Security & supply chain

GitHub Actions hands fork triggers a read-only cache token

GitHub Actions now issues read-only cache tokens to workflow events fired from outside a repository's collaborator set, applying least privilege to the default-branch cache so untrusted triggers cannot poison entries the next push reuses.

Jun 30, 2026 · Tomás Vega Security & supply chain

GitHub Agentic Workflows drop personal access tokens for the built-in Actions token

Agentic workflows on GitHub can now authenticate with the ephemeral GITHUB_TOKEN instead of a long-lived personal access token. It is a quiet credential-hygiene win that closes one of the messier blast radii in agent-driven CI.

Jun 15, 2026 · Tomás Vega