Which of the following is the best way for an enterprise to prevent certain marketplace actions from running?

The correct answer is D. Create a list of the actions that are allowed to run as an enterprise policy. Only these actions can. The best way for an enterprise to control which GitHub Actions run is by creating a list of approved actions as an enterprise policy. This approach restricts workflows to only use the actions that are explicitly allowed, ensuring security and compliance within the organization.

Manage GitHub Actions in the enterprise

Question

Options

ACreate a list of the actions that are restricted from being used as an enterprise policy. Every other
BIt is not possible; if an action is in the marketplace, its use cannot be restricted.
CCreate a list that is maintained as a . yml file in a . github repository specified in the enterprise.
DCreate a list of the actions that are allowed to run as an enterprise policy. Only these actions can

How the community answered

(48 responses)

A
4% (2)
B
2% (1)
C
10% (5)
D
83% (40)

Explanation

The best way for an enterprise to control which GitHub Actions run is by creating a list of approved actions as an enterprise policy. This approach restricts workflows to only use the actions that are explicitly allowed, ensuring security and compliance within the organization.

Topics

#enterprise policy#action restrictions#marketplace actions#allowlist

Community Discussion

No community discussion yet for this question.

Full GITHUB-ACTIONS Practice