eBPF Firewall for GitHub Actions
active 2026-03-13 → 2026-08-08 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 149 days from 2026-03-13 to 2026-08-08. Pushes: 94 total, peak 11 in a day. Pull requests: 9 total, peak 1 in a day. Issues: 14 total, peak 7 in a day. Comments: 13 total, peak 8 in a day. Stars: 6 total, peak 1 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| matthewdevenny | 108 | 86 | 8 | 0 |
| Copilot | 19 | 0 | 0 | 11 |
| cwkinard | 6 | 5 | 1 | 0 |
| caleblloyd | 4 | 3 | 0 | 0 |
| mtmk | 1 | 0 | 0 | 1 |
| jordanjennings | 1 | 0 | 0 | 1 |
Recent activity
Latest issues, pull requests and releases
- Issue comment#95mtmk2026-08-07 17:27#94 causal per-step attribution of network events (phase 0)
- Issue#107matthewdevenny2026-08-07 16:38Audit logger: replace long positional Log* signatures with a struct
- Issue#106matthewdevenny2026-08-07 16:20Phase 3: container attribution via root-cgroup egress
- Issue#105matthewdevenny2026-08-07 16:19Phase 2: per-step allowlists (step-scoped network policy)
- Issue#104matthewdevenny2026-08-07 16:19Phase 1: per-step mode and default action
- Issue#104matthewdevenny2026-08-07 16:19Phase 1: per-step mode and default action
- Issue#103matthewdevenny2026-08-07 16:18Phase 0.5: plan-based step naming; retire the diag watcher and actions:read
- Issue#103matthewdevenny2026-08-07 16:18Phase 0.5: plan-based step naming; retire the diag watcher and actions:read
- Pull request#76matthewdevenny2026-06-29 17:04
- Pull request#74matthewdevenny2026-06-26 19:35
- Pull request#70matthewdevenny2026-06-25 16:57
- Issue#67matthewdevenny2026-06-24 21:33Derived CNAME-target allow is query-filter-only — direct target queries return un-enforced IPs (CDN-variant split)
- Pull request#53cwkinard2026-05-13 20:12
- Pull request#48matthewdevenny2026-04-23 23:13
- Releasegithub-actions[bot]2026-04-23 21:51v1.2.0-rc.0
- Pull request#44matthewdevenny2026-04-22 19:20
- Pull request#38matthewdevenny2026-04-06 14:46
- Releasegithub-actions[bot]2026-04-03 14:42v1.0.1-rc.0
- Issue#29matthewdevenny2026-04-01 19:33Add cargowall-action
- Pull request#30matthewdevenny2026-04-01 19:33
- Issue#17matthewdevenny2026-03-19 03:08SaaS Summary Output
- Releasegithub-actions[bot]2026-03-18 23:22v1.0.0-rc.4
- Pull request#16matthewdevenny2026-03-18 23:19
- Issue#13matthewdevenny2026-03-18 22:07Change workflow_run_link to workflow_run_url
- Issue#13matthewdevenny2026-03-18 22:07Change workflow_run_link to workflow_run_url
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 6 stars here means stars gained during the window, not the repo's star count.