Topic · 2 articles

Open source

Diagram of a GitHub Actions workflow change moving through GitHub classification to a pre-execution hold. A write-access collaborator can deny it without starting a runner or approve it, after which the job receives only its configured token permissions and exposed secrets.
Nowpinion's reconstruction of GitHub's documented hold. The automatic pause comes before runner execution; approval does not change the token permissions or secrets configured for the job.Original diagram: Nowpinion

analysis

GitHub Can Hold a Suspicious Workflow. The Approver Still Has to Read It

A new GitHub Actions control can stop certain public-repository runs before execution. The final boundary is a write-access human—and the credentials waiting after the click.

Editorial illustration of a large data-center hall whose data cables converge on a compact workstation beneath an office desk.
AI-generated editorial illustration showing enterprise inference moving from hyperscale infrastructure to locally owned hardware.AI-generated editorial illustration: Nowpinion / OpenAIAI-generated editorial illustration.

opinion

The AI data center bubble may be sitting under your desk

Companies will not keep sending their most valuable secrets to distant AI infrastructure once capable local systems become affordable. The data-center boom is underestimating how quickly inference will move back inside the building.