From 2f1008be0ad9966ac5bee53eb2c69153e739932a Mon Sep 17 00:00:00 2001 From: osa22 Date: Fri, 24 May 2024 11:10:21 -0400 Subject: [PATCH] Making access to reusable workflows clearer (#33134) Co-authored-by: hubwriter --- content/actions/using-workflows/reusing-workflows.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/content/actions/using-workflows/reusing-workflows.md b/content/actions/using-workflows/reusing-workflows.md index 689771a0a275..8ee5123d4842 100644 --- a/content/actions/using-workflows/reusing-workflows.md +++ b/content/actions/using-workflows/reusing-workflows.md @@ -59,6 +59,18 @@ A reusable workflow can be used by another workflow if any of the following is t - The called workflow is stored in a private repository and the settings for that repository allow it to be accessed. For more information, see {% ifversion ghes or ghec %}"[AUTOTITLE](/actions/creating-actions/sharing-actions-and-workflows-with-your-enterprise)."{% else %}"[AUTOTITLE](/actions/creating-actions/sharing-actions-and-workflows-with-your-organization)" and "[AUTOTITLE](/actions/creating-actions/sharing-actions-and-workflows-from-your-private-repository)."{% endif %} {% endif %} +The following table shows the accessibility of reusable workflows to a caller workflow, depending on the visibility of the host repository. + +| Caller repository | Accessible workflows repositories | +|----|----| +| `private` | `private`{% ifversion ghes or ghec %}, `internal`,{% endif %} and `public` |{% ifversion ghes or ghec %} +| `internal` | `internal`, and `public` |{% endif %} +| `public` | `public` | + +The **Actions permissions** on the callers repository's Actions settings page must be configured to allow the use of actions and reusable workflows - see "[AUTOTITLE](/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#allowing-select-actions-and-reusable-workflows-to-run)." + +For {% ifversion ghes or ghec %}internal or {% endif %}private repositories, the **Access** policy on the Actions settings page of the called workflow's repository must be explicitly configured to allow access from repositories containing caller workflows - see "[AUTOTITLE](/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#allowing-access-to-components-in-a-private-repository)." + {% data reusables.actions.actions-redirects-workflows %} ## Using runners