mirror of
https://github.com/anthropics/claude-code-action.git
synced 2026-01-22 22:44:13 +08:00
change to experimental allowed domains and add .blob.core.windows.net to use cached bun isntall
This commit is contained in:
@@ -100,7 +100,7 @@ inputs:
|
|||||||
description: "Enable commit signing using GitHub's commit signature verification. When false, Claude uses standard git commands"
|
description: "Enable commit signing using GitHub's commit signature verification. When false, Claude uses standard git commands"
|
||||||
required: false
|
required: false
|
||||||
default: "false"
|
default: "false"
|
||||||
allowed_domains:
|
experimental_allowed_domains:
|
||||||
description: "Restrict network access to these domains only (newline-separated). If not set, no restrictions are applied. Provider domains are auto-detected."
|
description: "Restrict network access to these domains only (newline-separated). If not set, no restrictions are applied. Provider domains are auto-detected."
|
||||||
required: false
|
required: false
|
||||||
default: ""
|
default: ""
|
||||||
@@ -151,13 +151,13 @@ runs:
|
|||||||
USE_COMMIT_SIGNING: ${{ inputs.use_commit_signing }}
|
USE_COMMIT_SIGNING: ${{ inputs.use_commit_signing }}
|
||||||
|
|
||||||
- name: Setup Network Restrictions
|
- name: Setup Network Restrictions
|
||||||
if: steps.prepare.outputs.contains_trigger == 'true' && inputs.allowed_domains != ''
|
if: steps.prepare.outputs.contains_trigger == 'true' && inputs.experimental_allowed_domains != ''
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
# Install and configure Squid proxy
|
# Install and configure Squid proxy
|
||||||
sudo apt-get update && sudo apt-get install -y squid
|
sudo apt-get update && sudo apt-get install -y squid
|
||||||
|
|
||||||
echo "${{ inputs.allowed_domains }}" > $RUNNER_TEMP/whitelist.txt
|
echo "${{ inputs.experimental_allowed_domains }}" > $RUNNER_TEMP/whitelist.txt
|
||||||
|
|
||||||
# Configure Squid
|
# Configure Squid
|
||||||
sudo tee /etc/squid/squid.conf << EOF
|
sudo tee /etc/squid/squid.conf << EOF
|
||||||
|
|||||||
@@ -37,10 +37,11 @@ jobs:
|
|||||||
# claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
|
# claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
|
||||||
timeout_minutes: "60"
|
timeout_minutes: "60"
|
||||||
# Optional: Restrict network access to specific domains only
|
# Optional: Restrict network access to specific domains only
|
||||||
# allowed_domains: |
|
# experimental_allowed_domains: |
|
||||||
# .anthropic.com
|
# .anthropic.com
|
||||||
# .github.com
|
# .github.com
|
||||||
# api.github.com
|
# api.github.com
|
||||||
# .githubusercontent.com
|
# .githubusercontent.com
|
||||||
# bun.sh
|
# bun.sh
|
||||||
# registry.npmjs.org
|
# registry.npmjs.org
|
||||||
|
# .blob.core.windows.net
|
||||||
|
|||||||
Reference in New Issue
Block a user