Document public GitHub context repos in workflows

[mintlify]

Summary

Workflows now support adding public GitHub repositories as context, in addition to repos connected through the GitHub App or GitLab OAuth. Updated the Context repositories section of the workflows guide to:

• Distinguish between connected repos and public GitHub repos.
• Note that public repos are validated for visibility before they're added.
• Warn about prompt injection / untrusted context risks.
• Call out that public GitLab repos are not supported.

---

Note

Low Risk
Documentation-only update with no runtime or behavioral changes; the main risk is minor user confusion if wording is inaccurate.

Overview
Updates the Workflows guide to clarify that workflow context repositories can be either connected repos (via GitHub App/GitLab OAuth) or any public GitHub repo (added by URL or owner/repo and validated as public).

Adds an explicit security warning about prompt injection/poisoned context when using public repos, and notes that public GitLab repositories are not supported as workflow context.

^{Reviewed by Cursor Bugbot for commit 75c6c25. Bugbot is set up for automated code reviews on this repo. Configure here.}

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
mintlify	🟢 Ready	View Preview	Apr 26, 2026, 4:59 PM

[mintlify-development]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
userauth	🟢 Ready	View Preview	Apr 26, 2026, 5:00 PM

[ethanpalm]

Closing as duplicate of #5527. Both PRs document the same public GitHub context repos for workflows. PR #5527 includes both the workflows.mdx update and a changelog entry and was selected as the best version. Please review #5527 instead.