在仓库代理可以自由浏览之前，使用 gh-aw-firewall 限制 GitHub Agentic Workflows 的出站域名
Run GitHub Agentic Workflow jobs behind a domain allowlist and optional API-key sidecar instead of giving repository agents broad outbound access.
Prerequisites
Docker 20.10+, Docker Compose v2, Linux host or compatible runtime
Installation
Requirements and caveats from upstream:
- awf runs your command inside a Docker sandbox with three containers:
- Docker: 20.10+ with Docker Compose v2
- Node.js: 20.19.0+ (for building from source)
Basic usage or getting-started notes:
- OS: Ubuntu 22.04+ or compatible Linux distribution (x86_64 and arm64)
- See Compatibility for full details on supported versions and tested configurations.
- ## Get started fast
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/github/gh-aw-firewall/HEAD/README.md
Documentation
- https://github.github.com/gh-aw-firewall/
