GitHub now automatically holds suspicious Actions workflows in public repositories, but maintainers must still review approvals, permissions, and risks.
Read MoreGitHub Automatically Holds Suspicious Actions Runs, but Repository Owners Must Approve Them - TechRepublic
