Back to updates

Access-Control - 1

2026 (2)

February (2)

github: New repository settings for configuring pull request access

GitHub

2026-02-13

GitHub added two new repository settings to control how a repo accepts contributions via pull requests, including an option to disable pull requests entirely.

security: Copilot Studio agent security: Top 10 risks you can detect and prevent

Microsoft Security Blog

2026-02-12

Microsoft outlines 10 common security risks in Copilot Studio agents and pairs each with suggested detection and mitigation approaches using Microsoft Defender. The focus is on preventing exposure from configuration, access, and orchestration weaknesses.

2025 (4)

November (2)

github: New GitHub Actions OIDC token claims

GitHub

2025-11-13

GitHub Actions OIDC tokens now include a check_run_id claim, allowing workflows to present a run-specific identifier to external services. This change enables more fine-grained attribute-based access control and improved auditability for integrations.

github: Required review by specific teams now available in rulesets

GitHub

2025-11-04

GitHub now lets repository administrators require approvals from specific teams to merge changes into protected branches using rulesets. You can target these team-based approval requirements to particular files and folders, giving finer-grained control over who must sign off on changes.

September (2)

azure: [In preview] Public Preview: Signed request on Azure Front Door

Azure Updates

2025-09-22

Microsoft announced the public preview of Azure Front Door 'signed request', a new capability to strengthen access control for content delivery by allowing organizations to restrict access to content such as media streams and files.

github: Delegated bypass controls for push protection now available at the enterprise level

GitHub

2025-09-16

GitHub now offers delegated bypass controls for push protection at the enterprise level. Administrators can choose who is allowed to bypass secret-scanning push protections and designate reviewers for bypass requests, centrally managing approvers to improve governance and reduce risk.