# Restrict outbound domains for GitHub Agentic Workflows before repository agents can browse freely with gh-aw-firewall

> Run GitHub Agentic Workflow jobs behind a domain allowlist and optional API-key sidecar instead of giving repository agents broad outbound access.

- Skill: `agentskillexchange/restrict-outbound-domains-for-github-agentic-workflows-befor` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/restrict-outbound-domains-for-github-agentic-workflows-befor`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/restrict-outbound-domains-for-github-agentic-workflows-befor/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Integrations & APIs
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/restrict-outbound-domains-for-github-agentic-workflows-befor

---


# Restrict outbound domains for GitHub Agentic Workflows before repository agents can browse freely with gh-aw-firewall

Run GitHub Agentic Workflow jobs behind a domain allowlist and optional API-key sidecar instead of giving repository agents broad outbound access.

## Prerequisites

Docker 20.10+, Docker Compose v2, Linux host or compatible runtime

## Installation

Requirements and caveats from upstream:
- awf runs your command inside a Docker sandbox with three containers:
- **Docker**: 20.10+ with Docker Compose v2
- **Node.js**: 20.19.0+ (for building from source)

Basic usage or getting-started notes:
- **OS**: Ubuntu 22.04+ or compatible Linux distribution (x86_64 and arm64)
- See [Compatibility](docs/compatibility.md) for full details on supported versions and tested configurations.
- ## Get started fast

- Source: https://github.com/github/gh-aw-firewall
- Extracted from upstream docs: https://raw.githubusercontent.com/github/gh-aw-firewall/HEAD/README.md

## Documentation

- https://github.github.com/gh-aw-firewall/

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/restrict-outbound-domains-for-github-agentic-workflows-before-repository-agents-can-browse-freely-with-gh-aw-firewall/)