About GitHub Actions permissions for your repository
By default, GitHub Actions is enabled on all repositories. You can choose to disable GitHub Actions or limit the use of public actions. When you limit the use of public actions, people can only use local actions that exist in your repository or organization. For more information about GitHub Actions, see "About GitHub Actions."
You can enable GitHub Actions for your repository. When you enable GitHub Actions, workflows are able to run actions located within your repository and any other public repository. You can disable GitHub Actions for your repository altogether. When you disable GitHub Actions, no workflows run in your repository.
Alternatively, you can enable GitHub Actions in your repository but limit the actions a workflow can run. When you enable local actions only, workflows can only run actions located in your repository or organization.
Managing GitHub Actions permissions for your repository
- On GitHub, navigate to the main page of the repository.
- Under your repository name, click
Settings.

- In the left sidebar, click Actions.

- Under "Actions permissions", select an option.
