Fence

Fence is a security tool designed to harden CI/CD pipelines by enforcing bounded egress filtering and runner lockdown within GitHub Actions. It allows developers to restrict network access, disable passwordless sudo, and manage container permissions to reduce the attack surface of automated workflows.

Fence is a security tool designed to harden CI/CD pipelines by enforcing bounded egress filtering and runner lockdown within GitHub Actions. It allows developers to restrict network access, disable passwordless sudo, and manage container permissions to reduce the attack surface of automated workflows.

• 01Bounded network egress filtering
• 02Runner lockdown (disables passwordless sudo and Docker by default)
• 03Audit mode for policy tuning and activity logging
• 04Comprehensive network activity reports with JSON output
• 05Flexible allowlist for domain, IP, and CIDR destinations