nolabs-ai/Runseal - Supply Chain Security Action
Run commands with sealed credentials, L7 filtering, and nono sandbox enforcement for complete CI supply chain protection
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| run | Command to execute inside the sandbox | yes | — |
| policy | Runseal policy YAML | no | "" |
| fs-read | Comma-separated paths to allow read access when policy is not set | no | "" |
| fs-write | Comma-separated paths to allow write access when policy is not set | no | "" |
| network | Network policy when policy is not set: blocked or comma-separated domain allowlist | no | blocked |
| runseal-version | Runseal version to install, without or with leading v | no | 0.3.1 |
| nono-version | nono version to install, without or with leading v | no | 0.62.0 |
| verify-attestations | Verify GitHub artifact attestations for downloaded runseal and nono release assets | no | true |
| audit | Export nono audit evidence as a GitHub Actions artifact. Set to 'artifact' or 'true' to enable. | no | false |
Outputs
no outputs