| version | PMG release tag to install (e.g. v0.42.0) or "latest". | no | latest |
| api-key | SafeDep Cloud API key. When set together with tenant-id, cloud sync is enabled and credentials are passed via env (no keychain needed in CI). | no | "" |
| tenant-id | SafeDep Cloud tenant ID. Required when api-key is set. | no | "" |
| endpoint-id | Identifier reported to SafeDep Cloud for this runner. When empty and cloud is enabled, defaults to "github-actions/<owner>/<repo>" so events aggregate per repository instead of per ephemeral runner hostname. | no | "" |
| paranoid | Treat suspicious packages as malicious (PMG_PARANOID). Empty = use PMG default (false). | no | "" |
| cooldown-enabled | Block recently-published package versions (PMG_DEPENDENCY_COOLDOWN_ENABLED). Empty = use PMG default (true). | no | "" |
| cooldown-days | Cooldown window in days (PMG_DEPENDENCY_COOLDOWN_DAYS). Empty = use PMG default (5). | no | "" |
| proxy-mode | REMOVED. PMG always uses proxy-based interception. Setting "false" fails the action; any other value is ignored with a warning. | no | "" |
| sandbox | Run package managers inside an OS sandbox (PMG_SANDBOX_ENABLED). Empty = use PMG default (false). Enabling will also relax AppArmor user-namespace restrictions on the runner so unprivileged user namespaces work. | no | "" |
| sandbox-driver | Sandbox backend on Linux (PMG_SANDBOX_DRIVER). One of "landlock" or "bubblewrap". Defaults to "landlock" when sandbox is enabled and this is empty. | no | "" |
| verbosity | PMG output verbosity (PMG_VERBOSITY). One of "silent", "normal", "verbose". Empty = use PMG default. | no | "" |
| disable-telemetry | Disable anonymous PMG telemetry (PMG_DISABLE_TELEMETRY). Empty = use PMG default. | no | "" |
| skip-event-logging | Skip writing audit events to the local event log (PMG_SKIP_EVENT_LOGGING). Empty = use PMG default. | no | "" |
| config-file | Path (relative to the workspace) to a user-supplied PMG config.yml. Copied into the PMG config directory before "pmg setup install" runs, so PMG merges any missing template keys into it. | no | "" |
| cache | Reuse a previously-installed PMG binary from $RUNNER_TOOL_CACHE/pmg/<version>/<arch>. Off by default; fresh download per run keeps the binary current and reduces the blast radius of any cached artifact tampering. Checksum verification still runs on every install path. | no | false |
| server-mode | Run PMG as a persistent proxy server instead of shims. The proxy is started as a daemon and HTTP_PROXY/cert env vars are exported to the job. Requires a job-end "pmg proxy stop --fail-on-violation" step. | no | false |