[JENKINS-53752] Block PRs from forks from untrusted users

The plugin currently has no way to block untrusted users from making a PR from a fork and having this PR built by Jenkins. The GitHub Pull Request Builder does have this feature which is very useful for open source projects to protect the build system from malicious changes. The documentation on the GitHub Pull Request Builder wiki page says to move from the GHPRB plugin to the GitHub Branch source plugin which causes the user to lose this extremely useful functionality.

---
Originally reported by roguishmountain, imported from: Block PRs from forks from untrusted users

• status: Reopened
  
• priority: Major
  
• component(s): github-branch-source-plugin
  
• label(s): configuration, security, stalled-pr
  
• resolution: Unresolved
  
• votes: 6
  
• watchers: 10
  
• imported: 2025-12-02
  

The plugin currently has no way to block untrusted users from making a PR from a fork and having this PR built by Jenkins. The GitHub Pull Request Builder does have this feature which is very useful for open source projects to protect the build system from malicious changes. The documentation on the GitHub Pull Request Builder wiki page says to move from the GHPRB plugin to the GitHub Branch source plugin which causes the user to lose this extremely useful functionality.

2 attachments

- [github-branch-source-discover-pull-requests.PNG](https://issues.jenkins.io/secure/attachment/44586/github-branch-source-discover-pull-requests.PNG)
> 
- [image-2019-07-23-10-28-00-893.png](https://issues.jenkins.io/secure/attachment/48060/image-2019-07-23-10-28-00-893.png)
>