Which of the following is the best way for an enterprise to prevent certain marketplace actions from running?

Question

Options

• ACreate a list of the actions that are restricted from being used as an enterprise policy. Every other
• BIt is not possible; if an action is in the marketplace, its use cannot be restricted.
• CCreate a list that is maintained as a . yml file in a . github repository specified in the enterprise.
• DCreate a list of the actions that are allowed to run as an enterprise policy. Only these actions can

• A
  8% (2)
• B
  4% (1)
• C
  17% (4)
• D
  71% (17)

Explanation

GitHub Enterprise allows administrators to control which actions can be used across the enterprise through an allowlist policy. (D) is correct: you create a list of explicitly allowed actions as an enterprise policy, and only those listed actions can run in any repository within the enterprise. This is more secure than a blocklist (option A) because any new or unknown action is blocked by default unless explicitly permitted. (B) is incorrect - GitHub Enterprise does provide this control. (C) is incorrect - there is no .yml-file-based blocklist mechanism in a .github repository for enterprise-level action restriction; that is not how GitHub Enterprise policy works.

No community discussion yet for this question.