--- title: Introducing Workflow Run Policies: Guardrails for... description: StepSecurity has launched Workflow Run Policies, a feature that lets security and platform teams enforce compliance guardrails on GitHub Actions workflows. It... canonical: https://daily.dev/posts/introducing-workflow-run-policies-guardrails-for-blocking-non-compliant-github-actions-runs-a8qndb8ss twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Introducing Workflow Run Policies: Guardrails for Blocking Non-Compliant GitHub Actions Runs | daily.dev og:description: StepSecurity has launched Workflow Run Policies, a feature that lets security and platform teams enforce compliance guardrails on GitHub Actions workflows. It... og:url: https://daily.dev/posts/introducing-workflow-run-policies-guardrails-for-blocking-non-compliant-github-actions-runs-a8qndb8ss og:image: https://api.daily.dev/og/posts/A8Qndb8sS.png og:image:alt: Introducing Workflow Run Policies: Guardrails for Blocking Non-Compliant GitHub Actions Runs og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Introducing Workflow Run Policies: Guardrails for Blocking Non-Compliant GitHub Actions Runs **[StepSecurity](https://daily.dev/sources/stepsecurity)** · 8 min read · 0 upvotes · 0 comments ## Summary StepSecurity has launched Workflow Run Policies, a feature that lets security and platform teams enforce compliance guardrails on GitHub Actions workflows. It automatically cancels non-compliant workflow runs before they execute. Four policy types are supported: Compromised Actions Policy (blocks known compromised actions), Secret Exfiltration Policy (blocks unapproved workflows accessing secrets in non-default branches), Allowed Actions Policy (enforces an allowlist of permitted actions), and Runner Label Policy (controls which runner types are allowed). Policies can be applied at org or repo level, with Enforce or Dry Run modes, and every blocked run includes a detailed policy evaluation audit trail. The feature is available via a 14-day free trial through the StepSecurity dashboard. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Introducing Secret Exfiltration Protection for GitHub Actions](https://daily.dev/posts/introducing-secret-exfiltration-protection-for-github-actions-f3llaeq8h) · StepSecurity · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#github-actions](https://daily.dev/tags/github-actions), [#secrets-management](https://daily.dev/tags/secrets-management) [View this post on daily.dev](https://daily.dev/posts/introducing-workflow-run-policies-guardrails-for-blocking-non-compliant-github-actions-runs-a8qndb8ss) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Introducing Workflow Run Policies: Guardrails for Blocking Non-Compliant GitHub Actions Runs","url":"https://daily.dev/posts/introducing-workflow-run-policies-guardrails-for-blocking-non-compliant-github-actions-runs-a8qndb8ss","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/introducing-workflow-run-policies-guardrails-for-blocking-non-compliant-github-actions-runs-a8qndb8ss"},"datePublished":"2026-03-31T12:25:28.558Z","dateModified":"2026-03-31T12:30:50.764Z","description":"StepSecurity has launched Workflow Run Policies, a feature that lets security and platform teams enforce compliance guardrails on GitHub Actions workflows. It...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b2ec477afb46d55bb09b89ba79bdff6f?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b2ec477afb46d55bb09b89ba79bdff6f?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"StepSecurity","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"StepSecurity","logo":"https://media.daily.dev/image/upload/s--vegWii-S--/f_auto,q_auto/v1774959924/logos/stepsecurity?_a=BAMAMiWQ0","url":"https://daily.dev/sources/stepsecurity"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/introducing-workflow-run-policies-guardrails-for-blocking-non-compliant-github-actions-runs-a8qndb8ss","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,github-actions,secrets-management","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"StepSecurity","item":"https://daily.dev/sources/stepsecurity"},{"@type":"ListItem","position":3,"name":"Introducing Workflow Run Policies: Guardrails for Blocking Non-Compliant GitHub Actions Runs"}]} ```