write jobs

GitHub launches agentic workflows with read-only defaults and controlled access

GitHub has made agentic workflows generally available, running coding agents inside Actions with read-only defaults and separately scoped write jobs. That design sounds sensible, but the protections stop at direct write permissions and custom jobs. Security depends entirely on how each workflow is configured, which leaves real-world safety in developers' hands. It is a welcome step forward, though one that demands careful attention. For deeper context, our coverage of the Huang affair explores how trust and technology collide in high-stakes environments.