Bullfrog documentation

Bullfrog controls the outbound network connections your GitHub Actions workflows make. You declare the domains and IP addresses a job is allowed to reach, and Bullfrog records or blocks everything else.

There are two pieces, and you can use the first one on its own.

Bullfrog GitHub Action

The action runs an agent on the runner that inspects every DNS query and every new connection your job makes. It's open source under the MIT License, needs no account, and reports what it saw in the job summary.

Start with Get started with the Bullfrog GitHub Action.

Bullfrog platform

The platform collects connection results from every workflow run across your organization and lets admins define egress policies centrally. A policy applies to the jobs it matches and replaces whatever those workflows configured for themselves, so a baseline holds even when a workflow author changes the action's inputs.

Start with Connect your organization to the Bullfrog platform.