syntaqxSandboxes choose their outbound interception as they start again, as they did before 5152e1f3: a job that may be given brokered secrets sends its HTTP and HTTPS through egress, any other sandbox has only the abuse-report host intercepted. Naming that host on each sandbox class up front (outboundByHost in a static block) left every cloud runner unable to pick up its job until g1t-runner was rolled back; every sandbox still reaches the internet, with no list of hosts.aef1882History
README.md
GitHub's workflow schema
workflow-v1.0.json is GitHub's schema for workflow files, copied unchanged from
actions/languageservices, file
workflow-parser/src/workflow-v1.0.json, at commit
4043eda158e16579cc5fb1b0b07a4bce2a76f0b5 (5 August 2026). It is MIT licensed;
LICENSE is that repository's licence, copied from the same commit.
g1t does not read it at run time. src/syntax.rs lists the keys each part of a
workflow may have, and its tests check those lists against this file, so they
cannot drift from GitHub's. To update it, copy the file again, write the commit
here, and run cargo test -p g1t-actions.