bullfrogsec/Bullfrog Secure Runner
Block unauthorized outbound traffic (egress) in your Github workflows
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| allowed-ips | List of allowed IP addresses for outbound connections. | — | — |
| allowed-domains | List of allowed domains for outbound connections. | — | — |
| api-token | API token for submitting connection results to the Bullfrog control plane. If not provided, results will not be published. | — | — |
| collect-process-info | Enable this option to collect process information (PID, process name, command line) for network connections. Options: 'true' (default) or 'false'. | — | true |
| dns-policy | DNS policy to enforce when egress-policy is set to 'block'. Options: 'allowed-domains-only' (default) or 'any'. | — | allowed-domains-only |
| egress-policy | The egress policy to enforce. Options: 'audit' (default) or 'block'. | — | audit |
| enable-sudo | Enable this option to allow steps to execute commands with sudo. Options: 'true' (default) or 'false'. | — | true |
| _control-plane-api-base-url | (Internal) Base URL for the Bullfrog control plane API. This is useful for testing changes in a fork. | — | https://api.bullfrogsec.com/ |
| _control-plane-webapp-base-url | (Internal) Base URL for the Bullfrog control plane webapp. This is useful for testing changes in a fork. | — | https://app.bullfrogsec.com/ |
| _log-directory | (Internal) Directory to store log files. | — | ${{ runner.temp }}/agent-logs |
Outputs
no outputs