About automatic access to GitHub.com actions
By default, GitHub Actions workflows on GitHub AE cannot use actions directly from GitHub.com or GitHub Marketplace. To make all actions from GitHub.com available on your enterprise instance, you can use GitHub Connect to integrate GitHub AE with GitHub Enterprise Cloud.
To use actions from GitHub.com, your self-hosted runners must be able to make outbound connections to GitHub.com. No inbound connections from GitHub.com are required. For more information. 詳しい情報については、「セルフホストランナーについて」を参照してください。
Alternatively, if you want stricter control over which actions are allowed in your enterprise, you can manually download and sync actions onto your enterprise instance using the actions-sync tool. For more information, see "Manually syncing actions from GitHub.com."
About resolution for actions using GitHub Connect
When a workflow uses an action by referencing the repository where the action is stored, GitHub Actions will first try to find the repository on your enterprise. If the repository does not exist on your enterprise, and if you have automatic access to GitHub.com enabled, GitHub Actions will try to find the repository on GitHub.com.
If a user has already created an organization and repository in your enterprise that matches an organization and repository name on GitHub.com, the repository on your enterprise will be used instead of the GitHub.com repository. A malicious user could take advantage of this behavior to run code as part of a workflow
Enabling automatic access to all GitHub.com actions
Before enabling access to all actions from GitHub.com for your enterprise, you must enable GitHub Connect. For more information, see "Managing GitHub Connect."
-
GitHub AEの右上で、プロフィール写真をクリックし、続いてEnterprise settings（Enterpriseの設定）をクリックしてください。
-
In the enterprise account sidebar, click GitHub Connect.
-
Under "Users can utilize actions from GitHub.com in workflow runs", use the drop-down menu and select Enabled.
-
GitHub Connectを有効化した後は、Enterprise内のリポジトリでどのパブリックなアクションが使えるかを制限するポリシーが利用できます。 詳しい情報については、「Enterprise に GitHub Actions のポリシーを施行する」を参照してください。