TAG
#agentic-workflows
Stories connected through a shared idea, actor, technology or theme.
GitHub Agentic Workflows defaults read-only runs to no network accessThe release disables network access by default for read-only workflows. It also records richer session provenance, plugin installations and MCP configuration, improving auditability of agent-driven automation.→GitHub Agentic Workflows expands audit ledgers and threat visibilityThe release preserves default ledgers when importing shared workflows and attributes friction costs and experiment data to audit sources. It also narrows action schemas, enforces self-hosted-runner requirements at compile time and hardens private-to-public flow validation.→GitHub Agentic Workflows adds grader audits and hardens MCP executionThe release adds daily grader-audit workflows, cross-run audit clustering, and pattern analysis to its logs and audit commands. It also tightens label permissions, MCP gateway readiness, fork pull-request safe-output handling, scanner argument handling, and dependency security gates.→