CargoWall – eBPF Firewall for GitHub Actions
We just open-sourced CargoWall - a lightweight eBPF firewall for GitHub Actions. We originally built it to stop LLM agents from connecting to untrusted domains. After recent GitHub Actions supply chain compromises like the Trivy attack, we realized it'd work well for blocking untrusted connections from CI runners too. It uses iptables DNAT to redirect all outbound port 53 traffic to a local DNS proxy, which checks each query against a hostname allowlist before forwarding. Resolved IPs from allowed responses are inserted into eBPF LPM trie maps, and a TC egress classifier attached to the…
CargoWall – eBPF Firewall for GitHub Actions launched on March 31, 2026 with 14 votes, #999 of 23,380 launches that month and more than 90% of that year's launches.
In plain words
CargoWall is a lightweight eBPF firewall designed for GitHub Actions that restricts outbound network connections from CI runners and LLM agents. It works by intercepting DNS queries against a hostname allowlist, then using eBPF to block any network traffic to unapproved IP addresses and ports. The tool was created to prevent supply chain compromises in CI environments by ensuring that only trusted domains can be accessed during workflow execution. It is intended for development teams running GitHub Actions who need to protect their CI/CD pipelines from unauthorized network access.
written from the facts on this page · September 2026
From the sources
CargoWall Action to secure your GitHub Workflows. Contribute to code-cargo/cargowall-action development by creating an account on GitHub.
In the maker’s words, at launch
We just open-sourced CargoWall - a lightweight eBPF firewall for GitHub Actions. We originally built it to stop LLM agents from connecting to untrusted domains. After recent GitHub Actions supply chain compromises like the Trivy attack, we realized it'd work well for blocking untrusted connections from CI runners…
Does a similar job
all alternatives →
Netfence – Like Envoy for eBPF FiltersJan 2026 · github.com · ▲58To power the firewalling for our agents so that they couldn't contact arbitrary services, I build netfence. It's like Envoy but for eBPF filters. It allows you to define different DNS-based rules that are resolved in a local daemon to IPs, then pushed to the eBPF filter to allow traffic. By doing it this way, we can still allow DNS-defined rules, but prevent contacting random IPs. There's also no network performance penalty, since it's just DNS lookups and eBPF filters referencing memory. It also means you don't have to tamper with the base image, which the agent could potentially manipulate…
BunkerWeb – The Open-Source Web Application Firewall (WAF)2024 · github.com · ▲120🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
BunkerWeb – the open-source and cloud-native WAF2025 · docs.bunkerweb.io · ▲106Documentation of BunkerWeb, the open source and next generation WAF.
Credentials dumper for Linux using eBPF2022 · github.com · ▲235Credentials Dumper for Linux using eBPF. Contribute to citronneur/pamspy development by creating an account on GitHub.
Fence – Sandbox CLI commands with network/filesystem restrictionsJan 2026 · github.com · ▲78Hi HN! Fence wraps any command in a sandbox that blocks network by default and restricts filesystem writes. Useful for running semi-trusted code (package installs, build scripts, unfamiliar repos) with controlled side effects, or even just blocking tools that phone home. > fence curl https://example.com # -> blocked > fence -t code -- npm install # -> template with registries allowed > fence -m -- npm install # -> monitor mode: see what gets blocked One use-case is to use it with AI coding agents to reduce the risk of running agents with fewer interactive permission prompts: >…
A proactive way of securing your Linux server2020 · github.com · ▲143A rest application to update firewalld rules on a linux server - GitHub - prashantgupta24/firewalld-rest: A rest application to update firewalld rules on a linux server
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 20d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 29d ago · world.pixverse.video
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, March 2026
the whole month →
Switch from ChatGPT to Claude with import memory feature
AI · Mar 2026 · claude.com
Littlebird▲709Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.
AI · Mar 2026 · littlebird.ai
