Skip to content

Commit

Permalink
chore: updating bullfrog version
Browse files Browse the repository at this point in the history
  • Loading branch information
fallard84 committed Aug 8, 2024
1 parent d5dbad1 commit 097ba12
Show file tree
Hide file tree
Showing 3 changed files with 16 additions and 12 deletions.
16 changes: 10 additions & 6 deletions .github/workflows/bullfrog.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ jobs:
outputs:
diff: ${{ steps.changes.outputs.src }}
steps:
- name: Enable egress filtering
uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- uses: fallard84/paths-filter@dfb4213208eb30382ee3e27b8a810fc3fb8cc911 # v3.0.3
Expand All @@ -36,7 +40,7 @@ jobs:
if: ${{ needs.check-diff.outputs.diff == 'true' }}
steps:
- name: Enable egress filtering
uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a
with:
egress-policy: block
allowed-domains: |
Expand Down Expand Up @@ -75,7 +79,7 @@ jobs:

steps:
- name: Enable egress filtering
uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a
with:
egress-policy: block
allowed-domains: |
Expand Down Expand Up @@ -239,7 +243,7 @@ jobs:

steps:
- name: Enable egress filtering
uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a
with:
egress-policy: block
allowed-domains: |
Expand Down Expand Up @@ -282,7 +286,7 @@ jobs:

steps:
- name: Enable egress filtering
uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a
with:
egress-policy: block
allowed-domains: |
Expand Down Expand Up @@ -329,7 +333,7 @@ jobs:
minor: ${{ steps.release.outputs.minor }}
steps:
- name: Enable egress filtering
uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a

with:
egress-policy: block
Expand Down Expand Up @@ -392,7 +396,7 @@ jobs:
needs: [pre-release, pre-release-validation]
steps:
- name: Enable egress filtering
uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a
with:
egress-policy: block

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/conventional-commit.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ jobs:
runs-on: ubuntu-22.04
steps:
- name: Enable egress filtering
uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a
with:
egress-policy: block

Expand Down
10 changes: 5 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Not sure what IPs or domains? Simply use the default `egress-policy: audit` mode
```yaml
# This action should be the first step of your job, and should be loaded on every separate job.
# If this action is not loaded first, it will not be able to see or block any requests that occured prior to the action running.
- uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
- uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a # v0.8.1
with:
# List of IPs to allow outbound connections to.
# By default, only localhost and IPs required for the essential operations of Github Actions are allowed.
Expand Down Expand Up @@ -55,21 +55,21 @@ Not sure what IPs or domains? Simply use the default `egress-policy: audit` mode
The default usage will run in audit mode and will not block any request.
```yaml
- uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
- uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a # v0.8.1
```
### Block every outbound connections
```yaml
- uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
- uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a # v0.8.1
with:
egress-policy: block
```
### Only allow requests to domains required for pulling a docker image from the docker hub
```yaml
- uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
- uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a # v0.8.1
with:
egress-policy: block
allowed-domains: |
Expand All @@ -81,7 +81,7 @@ The default usage will run in audit mode and will not block any request.
### Only allow requests to a specific IP address without blocking DNS requests
```yaml
- uses: bullfrogsec/bullfrog@931dc0cf68188ce1f6ddece4ab921bbf104fadc7 # v0.6.1
- uses: bullfrogsec/bullfrog@d5dbad144cb435169109225c3cb8ac9d27a3e75a # v0.8.1
with:
egress-policy: block
allowed-ips: |
Expand Down

0 comments on commit 097ba12

Please sign in to comment.