surshar / claude-code
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.
Built by Anthropic · github.com/anthropics
| 1 | # Hosts that jobs on GitHub's egress-firewall runner (runs-on: ubuntu-24.04-firewall) |
| 2 | # may reach. All other hosts are blocked, apart from any that GitHub's firewall allows |
| 3 | # by default. Add a host only when a workflow step needs it, name it in full (no '*'), and say what uses it. |
| 4 | mode: enforce |
| 5 | allow: |
| 6 | # Claude API: model requests, trading the workflow's GitHub identity token for a |
| 7 | # short-lived API token, and fetching the Claude GitHub App's token in claude.yml |
| 8 | - api.anthropic.com |
| 9 | # GitHub API: calls made by the Claude Code action, and by gh in scripts/gh.sh, |
| 10 | # scripts/edit-issue-labels.sh and scripts/comment-on-duplicates.sh |
| 11 | - api.github.com |
| 12 | # Claude Code install script, fetched by the Claude Code action |
| 13 | - claude.ai |
| 14 | # Claude Code binary, downloaded by the install script |
| 15 | - downloads.claude.ai |
| 16 | # Bun release download (oven-sh/setup-bun, used by the Claude Code action) |
| 17 | - release-assets.githubusercontent.com |
| 18 | # npm packages for the Claude Code action (bun install) |
| 19 | - registry.npmjs.org |
| 20 | # apt packages bubblewrap and socat, which the Claude Code action installs when a |
| 21 | # workflow admits users without write access (claude-issue-triage.yml, |
| 22 | # claude-dedupe-issues.yml) |
| 23 | - azure.archive.ubuntu.com |
| 24 | - archive.ubuntu.com |
| 25 | - security.ubuntu.com |
| 26 | # Statsig event logging (claude-dedupe-issues.yml, "Log duplicate comment event to Statsig") |
| 27 | - events.statsigapi.net |