gregclermont/Egress Filter
Transparent proxy with eBPF-based PID tracking for monitoring network egress
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| policy | Egress policy rules (one rule per line) | no | "" |
| audit | Run in audit mode (log only, do not block) | no | false |
| allow-sudo | Allow sudo for the runner user (less secure, needed for some actions like Tailscale) | no | false |
| socket-security | Check package downloads against Socket.dev for known-malicious packages | no | false |
| github-token | GitHub token for API permissions analysis (detected in requests, not used for API calls) | no | ${{ github.token }} |
| container-certs | Inject proxy CA certificate into containers (disable if container cert injection causes issues) | no | true |
| upload-log | Upload connection log as workflow artifact (default: only when audit mode, blocks, or errors) | no | — |
Outputs
no outputs