Thanks for the perspective. When you wrote:
"You indicated elsewhere your concern about malware" I think you may be confusing me with uhm, well, someone who is not me: https://trac.macports.org/ticket/72492#comment:3 (I am not, nor have I ever been mascguy (Christopher Nielsen)). I guess I was thinking of places where I have worked in the past where we had segmented staging and prod (heck, sometimes even more segments like dev, stage, prod, etc. all of those segments being outside of local branches) that might be a way to pre-populate a mirror for use by GitHub Actions, but before pushing/committing something to MacPorts users. If there's nothing like that, no worries! I'll hunker down with Thomas and see what sort of mirroring alternatives we may be able to come up with in this instance. Thanks again for your perspective!