Johannes Schindelin <Johannes.Schindelin@xxxxxx> writes: > If you click on one of them (such as above-mentioned "Codacy Security > Scan"), you will see that "This workflow run has been marked as > disruptive" (see for yourself at > https://github.com/git/git/actions/workflows/codacy-analysis.yml). Yes, I was the one who "manually disabled" some of them. I did not find how to mark them "as disruptive", though. How well are our refs protected from these random "Actions"? Can somebody spam us with a pull request with a new "workflow" that advances one of our integration branches ;-)?