GitHub Separates Who Writes Code From Who Runs Your CI

GitHub Actions lets admins control who and what triggers workflows. A default pull_request_target block starts Nov. 2. Here's what to check.