Skip to main content

Action inputs

Inputs accepted by bullfrogsec/bullfrog under with:. Listed alphabetically. Requires v0.11.0.

allowed-domains​

string | Optional | Default: none

Domains the job may connect to, one per line. A leading *. matches any subdomain at any depth but does not match the apex domain: *.example.com matches api.example.com and eu.api.example.com, not example.com.

Bullfrog additionally allows the domains required for GitHub Actions to operate and for job summaries to upload, whether or not this input is set.

Applies when egress-policy is block. In audit mode, entries determine whether a connection is recorded as authorized or unauthorized.

allowed-ips​

string | Optional | Default: none

IP addresses the job may connect to, one per line. Accepts IPv4, IPv6, and CIDR ranges.

Bullfrog additionally allows localhost and the addresses required for GitHub Actions to operate, whether or not this input is set.

Applies when egress-policy is block. In audit mode, entries determine whether a connection is recorded as authorized or unauthorized.

api-token​

string | Optional | Default: none

A Bullfrog platform API token. When set, the job submits its connection results to the control plane and fetches the egress policy that applies to it. When unset, results stay in the job summary and no policy lookup happens.

Store the token as a GitHub Actions secret and reference it, rather than writing it into the workflow file.

collect-process-info​

boolean | Optional | Default: true

Whether to record the process behind each connection: process name, executable path, and command line. Set to false to omit these fields from the connection results.

dns-policy​

string | Optional | Default: allowed-domains-only

Controls which DNS queries Bullfrog resolves. Takes effect only when egress-policy is block.

Possible values:

  • allowed-domains-only: Resolves only domains listed in allowed-domains.
  • any: Resolves any domain.

egress-policy​

string | Optional | Default: audit

Controls what Bullfrog does with a connection to a destination that isn't allowlisted.

Possible values:

  • audit: Records every connection and allows all traffic.
  • block: Drops connections to destinations that aren't in allowed-domains or allowed-ips.

enable-sudo​

boolean | Optional | Default: true

Whether steps may run commands with sudo.

Set to false to withhold root from the job. Bullfrog then also filters the Docker API and refuses requests that would give a container control of the host. See Bypass risks and limits for the refused requests and the reasoning.