Repository navigation
Conversation
Anonymous accounts may build but never run, but that rule only lived in the manual execute route and OAuth token auth. An anonymous session could list its own workflow on the marketplace and run it through the public call route, and its schedules kept running through the executor. - loadWorkflowForExecution refuses a workflow whose owner is anonymous, covering the execute route, webhooks and the executor (schedules). - The marketplace call route does not serve a listing whose owner is anonymous or deactivated. - The listing (POST/PATCH) and go-live routes refuse anonymous callers.
…nd-runs fix: stop anonymous accounts from listing or running workflows
joelorzet
requested review from
a team,
OleksandrUA and
eskp
and removed request for
a team
November 1, 2026 22:49
This branch was previously deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.