egress-filtering 话题在 GitHub 上没有填写简介，这里按 Star 数汇总最相关的热门仓库。
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
☄️ go-out - A Golang egress buster.
PowerShell 脚本/GUI 工具，企业用以通过组策略（GPO）加固 Windows Defender 防火墙。这些工具可用于强制执行网络应用白名单，强化设备的安全态势，以防御软件供应链等攻击，并可与特权访问工作站（PAW）配合使用。
Secure proxy solution with filtering, real-time monitoring and a modern web UI.
Find what egress ports are allowed
Secure GitHub actions with 1 line of code
Secure-by-default OpenClaw on Ubuntu, with a verifiable security report
Run OpenClaw, Hermes and your own agents in microsandbox microVMs. One reviewable TOML role sets image, allowed domains and host-bound secrets. No daemon.
Egress filtering for containers, Kubernetes pods, and GitHub Actions runners.
Sandboxed macOS VMs with full Xcode for AI coding agents — plus a lightweight Linux container mode.
Runtime network egress control for Python. One function call to restrict which hosts your code can connect to.
Run any project or coding agent in a sandboxed, egress-firewalled, non-root container. Drop in a config, run sluice.
Hardened Docker sandbox for OpenAI Codex CLI with workspace-only mounts, per-project auth, and allowlisted network egress
[Azure Blueprint] Learn how to deploy Azure Managed Hub-Spoke using Virtual WAN and Calico Networking
Network simulation and security testing platform with 13 supported protocols, red team arsenal, active defense and traffic simulators
Lightweight egress guard for servers.
Linux eBPF network kill switch for vpn apps an beyond
Deploy a firewall that should allow or drop traffic based on customisable rules
Run the code your AI agent writes inside a microVM, never on your host. Self-hosted sandbox platform: Cloud Hypervisor sessions, deny-by-default egress, secrets kept off the guest, owner from your IdP.