From 9e48b3166bf1423a2452c1a0ad181b8573a79de0 Mon Sep 17 00:00:00 2001 From: Ronen Slavin Date: Wed, 20 May 2026 16:09:59 +0300 Subject: [PATCH] docs(readme): document IPv6 entries on allowed-ips / allowed-hosts allowed-ips and ignored-ip-nets show IPv6 examples alongside IPv4 (2606:4700::1111, fc00::/7). allowed-hosts notes that both A and AAAA DNS answers for the host are honored. Co-Authored-By: Claude Opus 4.7 (1M context) --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index de29fac..6afe58a 100644 --- a/README.md +++ b/README.md @@ -38,9 +38,9 @@ The action supports the following parameters: | `secret` | | Cimon secret for authentication | | `url` | | Cimon endpoint for authentication | | `prevent` | `false` | Enable prevention mode | -| `allowed-ips` | | A comma or white space separated list of allowed IP addresses | -| `allowed-hosts` | | A comma or white space separated list of allowed domain names. The left-most label can be the wildcard character (`*`) to match multiple subdomains (e.g. `*.example.com`). | -| `ignored-ip-nets` | | A comma or white space separated list of ignored IP networks in CIDR notation, e.g. 10.0.0.0/8, 172.16.0.0/12. This setting is mandatory if your workflow runs containers attached to a custom network with configured sub-range. In other words, inter-container networking is usually ignored by Cimon. Cimon implicitly ignores 10.0.0.0/8 and 172.16.0.0/12 networks. | +| `allowed-ips` | | A comma or white space separated list of allowed IP addresses (IPv4 or IPv6, e.g. `8.8.8.8, 2606:4700::1111`). | +| `allowed-hosts` | | A comma or white space separated list of allowed domain names. The left-most label can be the wildcard character (`*`) to match multiple subdomains (e.g. `*.example.com`). Both A (IPv4) and AAAA (IPv6) DNS answers for the host are honored (since cimon `v1.0.18`). | +| `ignored-ip-nets` | | A comma or white space separated list of ignored IP networks in CIDR notation (IPv4 or IPv6, e.g. `10.0.0.0/8, 172.16.0.0/12, fc00::/7`). This setting is mandatory if your workflow runs containers attached to a custom network with configured sub-range. In other words, inter-container networking is usually ignored by Cimon. Cimon implicitly ignores 10.0.0.0/8 and 172.16.0.0/12 networks. | | `github-token` | `${{ github.token }}` | GitHub token (used to overcome GitHub rate limiting) | | `report-job-summary` | `true` | Report results through job summary output | | `report-process-tree` | `false` | Enable to report the process tree |