djordjelukic1639080/cbx-example-github-web:1

schemaVersion: "3"
displayName: GitHub on the web
description: 'Opens github.com and GitHub''s API and content hosts to the sandbox, for browsing, curl and tools that talk to GitHub. Composed with github-repo it lifts that mixin''s one-repository confinement: add it only when the agent should reach the rest of GitHub.'
version: 1.0.0
kind: mixin
provides:
    - [email protected]
capabilities:
    - group:
        name: github-web
        capabilities:
            - type: com.docker.sandbox/network-policy@2
              config:
                runtime:
                    allow:
                        - github.com
                        - api.github.com
                        - raw.githubusercontent.com
                        - codeload.github.com
                        - release-assets.githubusercontent.com
            - type: com.docker.sandbox/agent-context@1
              config:
                content: |
                    github.com, api.github.com and GitHub's content hosts
                    (raw.githubusercontent.com, codeload.github.com,
                    release-assets.githubusercontent.com) are reachable over HTTPS.