Skip to main content
GitHub Docs
Version:
Free, Pro, & Team
Search or ask Copilot
Search or ask
Copilot
Select language: current language is English
Search or ask Copilot
Search or ask
Copilot
Open menu
Collapse sidebar
Expand sidebar
Scroll breadcrumbs left
Home
GitHub Actions
Reference
Security
Securely using pull_request_target
Scroll breadcrumbs right
GitHub Actions
Get started
Quickstart
Understand GitHub Actions
Continuous integration
Continuous deployment
Actions vs Apps
Concepts
Workflows and actions
Workflows
Variables
Contexts
Expressions
Reusing workflow configurations
Custom actions
Deployment environments
Concurrency
Workflow artifacts
Dependency caching
Notifications for workflow runs
Runners
GitHub-hosted runners
Larger runners
Self-hosted runners
Private networking
Runner groups
Runner scale sets
Actions Runner Controller
Support for ARC
Security
Secrets
GITHUB_TOKEN
OpenID Connect
Artifact attestations
Script injections
Compromised runners
Kubernetes admissions controller
Metrics
Billing and usage
How-tos
Write workflows
Use workflow templates
Choose when workflows run
Trigger a workflow
Control jobs with conditions
Control workflow concurrency
Choose where workflows run
Choose the runner for a job
Run jobs in a container
Choose what workflows do
Use jobs
Find and customize actions
Use GitHub CLI
Add scripts
Use secrets
Use variables
Pass job outputs
Set default values for jobs
Deploy to environment
Run job variations
Reuse automations
Reuse workflows
Create workflow templates
Share across private repositories
Share with your organization
Secure your work
Use artifact attestations
Use artifact attestations
Increase security rating
Enforce artifact attestations
Verify attestations offline
Manage attestations
Security harden deployments
OIDC in AWS
OIDC in Azure
OIDC in Google Cloud Platform
OIDC in HashiCorp Vault
OIDC in JFrog
OIDC in Octopus Deploy
OIDC in PyPI
OIDC in cloud providers
OIDC with reusable workflows
Deploy
Configure and manage deployments
Control deployments
View deployment history
Manage environments
Review deployments
Create custom protection rules
Configure custom protection rules
Deploy to third-party platforms
Node.js to Azure App Service
Python to Azure App Service
Java to Azure App Service
.NET to Azure App Service
PHP to Azure App Service
Docker to Azure App Service
Azure Static Web App
Azure Kubernetes Service
Amazon Elastic Container Service
Google Kubernetes Engine
Sign Xcode applications
Create and publish actions
Manage custom actions
Create a CLI action
Set exit codes
Publish in GitHub Marketplace
Release and maintain actions
Use immutable releases
Manage workflow runs
Manually run a workflow
Re-run workflows and jobs
Cancel a workflow run
Disable and enable workflows
Skip workflow runs
Delete a workflow run
Download workflow artifacts
Remove workflow artifacts
Manage caches
Approve runs from forks
Manage runners
GitHub-hosted runners
Use GitHub-hosted runners
Customize runners
View current jobs
Connect to a private network
Connect with OIDC
Connect with WireGuard
Self-hosted runners
Add runners
Run scripts
Customize containers
Configure the application
Apply labels
Use in a workflow
Manage access
Monitor and troubleshoot
Remove runners
Larger runners
Manage larger runners
Control access
Use larger runners
Use custom images
Actions Runner Controller
Authenticate to the API
Deploy runner scale sets
Use ARC in a workflow
Use proxy servers
Monitor workflows
Use the visualization graph
View workflow run history
View job execution time
Add a status badge
Use workflow run logs
View job condition logs
Enable debug logging
Troubleshoot workflows
Administer
View metrics
Get support
Reference
Workflows and actions
Workflow syntax
Events that trigger workflows
Workflow commands
Variables
Expressions
Contexts
Deployments and environments
Dependency caching
Reusing workflow configurations
Metadata syntax
Workflow cancellation
Dockerfile support
Runners
GitHub-hosted runners
Larger runners
Self-hosted runners
Security
Secure use
Securely using pull_request_target
Secrets
OIDC
Limits
GitHub Actions Importer
Supplemental arguments and settings
Custom transformers
Tutorials
Create an example workflow
Build and test code
Go
Java with Ant
Java with Gradle
Java with Maven
.NET
Node.js
PowerShell
Python
Ruby
Rust
Swift
Xamarin apps
Authenticate with GITHUB_TOKEN
Migrate to GitHub runners
Create actions
Create a JavaScript action
Create a composite action
Publish packages
Publish Docker images
Publish Java packages with Gradle
Publish Java packages with Maven
Publish Node.js packages
Manage your work
Add labels to issues
Close inactive issues
Add comments with labels
Schedule issue creation
Store and share data
Use containerized services
Create a Docker container action
Use Docker service containers
Create PostgreSQL service containers
Create Redis service containers
Migrate to GitHub Actions
Automated migrations
Use GitHub Actions Importer
Azure DevOps migration
Bamboo migration
Bitbucket Pipelines migration
CircleCI migration
GitLab migration
Jenkins migration
Travis CI migration
Manual migrations
Migrate from Azure Pipelines
Migrate from CircleCI
Migrate from GitLab CI/CD
Migrate from Jenkins
Migrate from Travis CI
Actions Runner Controller
Get started
Troubleshoot
Develop agentic workflows
Securely using pull_request_target
Learn about the security risks of the
pull_request_target event
.
Copy as Markdown
In this article