Heads up: changed required approval settings for actions in the org

[targos]

@nodejs/tsc @nodejs/community-committee @nodejs/moderation

I changed the global setting at https://github.com/organizations/nodejs/settings/actions Previous value (GitHub default): "Require approval for first-time contributors" New value: "Require approval for first-time contributors who are new to GitHub"

[Trott]

I'm not opposed, but I am curious to know what was the motivation for the change?

[targos]

In nodejs/node, I had to manually approve workflow runs on several pull requests that were open for many weeks. GitHub recently introduced this to protect themselves from crypto miners, but I don't think the nodejs org ever got a pull request opened to abuse the system.

[richardlau]

In nodejs/node, I had to manually approve workflow runs on several pull requests that were open for many weeks. GitHub recently introduced this to protect themselves from crypto miners, but I don't think the nodejs org ever got a pull request opened to abuse the system.

We did: https://github.com/nodejs/moderation/issues/411