hanshal101/Drop-Drop Agent

Monitor and control outbound network connections with egress filtering

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Maintainedlast commit Dec 12, 2025
License: Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned

uses: hanshal101/drop-drop@a6eed0b96ee8932f5e98a2cca658f712c14b7298 # v0.0.0

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
allowed-ips	List of IPs to allow outbound connections to. By default, only localhost and IPs required for the essential operations of Github Actions are allowed.	no	""
allowed-domains	List of domains to allow outbound connections to. Wildcards are accepted. For example, if allowing `*.google.com`, this will allow `www.google.com`, `console.cloud.google.com` but not `google.com`. By default, only domains required for essential operations of Github Actions and uploading job summaries are allowed.	no	""
dns-policy	Controls the policy for DNS requests when `egress-policy` is set to `block`. Options: `allowed-domains-only` (default): Allows DNS requests only for domains specified in `allowed-domains`. `any`: Allows any DNS requests.	no	allowed-domains-only
egress-policy	The egress policy to enforce. Valid values are `audit` and `block`. Default: audit	no	audit
enable-sudo	Enable this option to allow steps to execute commands with sudo. This is useful for workflows that require elevated privileges to perform certain tasks. Options: `true` (default) or `false`.	no	true
tetragon-address	The address of the Tetragon gRPC server. Default: localhost:54321	no	localhost:54321
docker-image	The Docker image to use for the Drop-Drop agent. Default: hanshal785/drop-drop-agent:latest	no	hanshal785/drop-drop-agent:latest

Outputs

no outputs