{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreibmb3emooue2zroww2efbiqbghyjw4rsa4mdpspstwgcto4dyiwii",
    "uri": "at://did:plc:rrwxywdlrz5fkwj5g4u4jnrk/app.bsky.feed.post/3mowxu3ojkxy2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreigiya24cdaidfcknk6spvkd5jc6wjrcsziaz4tdgywum6fdodzqhm"
    },
    "mimeType": "image/jpeg",
    "size": 467770
  },
  "path": "/article/4188144/github-actions-hardens-checkout-security-to-block-pwn-request-attacks-2.html",
  "publishedAt": "2026-06-22T23:49:10.000Z",
  "site": "https://www.csoonline.com",
  "tags": [
    "Code Security, GitHub, Security, Software Development, Version Control Systems, Vulnerabilities",
    "‘pwn request’",
    "GitHub said",
    "TanStack Router ecosystem",
    "GitHub itself was breached",
    "limiting automatic install script execution in npm",
    "InfoWorld"
  ],
  "textContent": "Stung by a surge in cyberattacks that have run amok in developer environments, GitHub has strengthened the security of _actions/checkout_ to block ‘pwn request’ attacks that exploit insecure use of the _pull_request_target_ workflow trigger to run an attacker’s code with the workflow’s full privileges.\n\nAnnounced on June 18, _actions/checkout_ v7 now automatically blocks and fails workflows when used inside _pull_request_target_ or _workflow_run_ events when attempting to fetch unreviewed fork pull request code.\n\nFrom now on, the only away around these checks will be for developers to implement an opt out by adding an explicit _allow-unsafe-pr-checkout_ to _actions/checkout_ , GitHub said in its V7 changelog.\n\nThe change signals the beginning of a new ‘secure by default’ era in which security will be defined by the GitHub system rather than being left to discretion of developers. As part of that effort, on July 16, the new defaults will be backported to all supported major versions.\n\n“Workflows pinned to a floating major tag (e.g., actions/checkout@v4) will automatically pick up the change. Workflows pinned to a specific SHA, minor, or patch version aren’t affected by the backport and will need to upgrade using Dependabot or through established upgrade processes,” GitHub explained.\n\nHowever, because pwn request attacks can happen in other ways, “further hardening of additional events may be explored in future releases,” the changelog added.\n\n## Blind spot\n\nIf there’s a criticism that can be levelled at GitHub over this, it’s that it has taken so long to address a weakness that’s been known about for years.\n\nThe issue is with GitHub Actions, which allows triggers to run workflows, including _pull_request,_ which processes third-party forks without giving access to secrets such as API keys, service tokens, and credentials. The downside is that this restriction prevents some automations from working, which is why developers turn to an alternative trigger, _pull_request_target,_ which grants the required access.\n\nAt some point, attackers realized that where _pull_request_target_ was configured carelessly with _actions/checkout_ to pull in untrusted fork code, it offered a back door into repositories and their secrets.\n\nIn other words, the weakness in _pull_request_target_ isn’t the trigger itself, which is legitimate and secure when correctly used, but in its incorrect use. As GitHub’s changelog puts it: “Checking out the head of an unreviewed pull request from a fork inside one of these workflows typically lets attacker-controlled code execute with the workflow’s full privileges.”\n\nThe arrival of _actions/checkout_ v7, however, should make this harder, automatically blocking risky workflows regardless of their configuration.\n\nUnfortunately, a lot of damage has already been done. Open source repositories have recently come under sustained attacks from the TeamPCP hacking group, using a variety of techniques, including pwn requests.\n\nA notable example was its attack last month, which compromised 170 node package manager (npm) packages, including the TanStack Router ecosystem, thanks to a pwn request exploit. Embarrassingly, in a separate incident not involving a pwn request, GitHub itself was breached and the attackers exfiltrated source code from around 3,800 of the company’s internal repositories.\n\nBetter late than never, GitHub has sprung into action, plotting a series of security reforms on the platform, including, earlier this month, limiting automatic install script execution in npm.\n\n_This article originally appeared on InfoWorld._",
  "title": "GitHub Actions hardens checkout security to block ‘pwn request’ attacks"
}