egress-filter/action.yml at main · SekoiaLab/egress-filter · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
name: 'Egress Filter'
description: 'Transparent proxy with eBPF-based PID tracking for monitoring network egress'
author: 'gregclermont'

inputs:
  policy:
    description: 'Egress policy rules (one rule per line)'
    required: false
    default: ''
  audit:
    description: 'Run in audit mode (log only, do not block)'
    required: false
    default: 'false'
  allow-sudo:
    description: 'Allow sudo for the runner user (less secure, needed for some actions like Tailscale)'
    required: false
    default: 'false'
  socket-security:
    description: 'Check package downloads against Socket.dev for known-malicious packages'
    required: false
    default: 'false'
  github-token:
    description: 'GitHub token for API permissions analysis (detected in requests, not used for API calls)'
    required: false
    default: ${{ github.token }}
  container-certs:
    description: 'Inject proxy CA certificate into containers (disable if container cert injection causes issues)'
    required: false
    default: 'true'
  upload-log:
    description: 'Upload connection log as workflow artifact (default: only when audit mode, blocks, or errors)'
    required: false

runs:
  using: 'node24'
  pre: 'dist/pre/index.js'
  main: 'dist/main/index.js'
  post: 'dist/post/index.js'

branding:
  icon: 'shield'
  color: 'blue'