segararai/GitHub Actions Sandbox Probes

Run sandbox escape probes and then execute a command in a hardened Docker container.

Trust Signals

name	description	required	default
image	Docker image used for the sandbox.	yes	—
command	Command to run after the probes pass.	yes	—
workspace	Host path mounted read-only at /workspace.	no	""
user	Container user.	no	1001
pids-limit	Docker process limit.	no	512
network	Docker network mode. Defaults to none; use bridge only when the sandboxed command needs outbound network.	no	none
env	Newline-separated KEY=value entries passed to the sandbox command.	no	""
unsafe-env	Newline-separated KEY=value entries for sensitive CI environment variables that are intentionally exposed to the sandbox command.	no	""
inherit-env	Newline, comma, or space separated variable names inherited from the caller environment. Use auto for the curated non-sensitive default set, or none to disable it.	no	auto
unsafe-inherit-env	Newline, comma, or space separated sensitive CI environment variable names intentionally inherited into the sandbox command.	no	""
disable-checks	Comma, space, or newline separated probe checks to disable after explicit risk acceptance.	no	""

no outputs