vetto 0.2.6

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95

name: 'vetto-action'
description: 'Run agent commands inside the vetto daemon-less security sandbox in GitHub Actions'
inputs:
  command:
    description: 'Agent command to execute through vetto sandbox.'
    required: true
  policy:
    description: 'Optional custom policy file path or community policy.'
    required: false
    default: ''
  net:
    description: 'Network mode (off, allowlist:..., strict:...).'
    required: false
    default: 'off'
  profile:
    description: 'Built-in policy profile (default, strict, permissive, audit).'
    required: false
    default: 'strict'
  report:
    description: 'Comma-separated report formats (json, sarif, md, html).'
    required: false
    default: 'json,sarif'
  report-dir:
    description: 'Directory for generated audit and security reports.'
    required: false
    default: '.vetto/reports'
  version:
    description: 'Vetto version to install via npm (or latest).'
    required: false
    default: 'latest'
  fail-on-block:
    description: 'Fail step if at least one blocked attempt is observed (true/false/threshold).'
    required: false
    default: 'false'
  upload-sarif:
    description: 'Upload generated SARIF report to GitHub Code Scanning.'
    required: false
    default: 'false'
outputs:
  sarif-path:
    description: 'Path to the generated SARIF report file.'
    value: ${{ steps.run.outputs.sarif-path }}
  exit-code:
    description: 'Exit code of the sandboxed command.'
    value: ${{ steps.run.outputs.exit-code }}
runs:
  using: 'composite'
  steps:
    - name: Install vetto sandbox
      shell: bash
      run: |
        if ! command -v vetto >/dev/null 2>&1; then
          echo "Installing vetto via npm..."
          if [ "${{ inputs.version }}" = "latest" ] || [ -z "${{ inputs.version }}" ]; then
            npm install -g vetto || npm install -g @vetto/cli || true
          else
            npm install -g "vetto@${{ inputs.version }}" || true
          fi
        fi
        if ! command -v vetto >/dev/null 2>&1; then
          # Fallback: install native binary directly
          kernel="$(uname -s | tr '[:upper:]' '[:lower:]')"
          arch="$(uname -m)"
          case "${arch}" in
            x86_64|amd64) arch="x86_64" ;;
            aarch64|arm64) arch="aarch64" ;;
          esac
          ver="${{ inputs.version }}"
          [ "${ver}" = "latest" ] && ver="0.2.5"
          ver="${ver#v}"
          bin_url="https://github.com/shleder/vetto/releases/download/v${ver}/vetto-${kernel}-${arch}.tar.gz"
          echo "Fetching native binary from ${bin_url}..."
          mkdir -p "${HOME}/.local/bin"
          curl -sSLf --retry 3 "${bin_url}" | tar -xz -C "${HOME}/.local/bin" 2>/dev/null || true
          echo "${HOME}/.local/bin" >> "${GITHUB_PATH}"
        fi

    - name: Run sandboxed command
      id: run
      shell: bash
      env:
        VETTO_ACTION_COMMAND: ${{ inputs.command }}
        VETTO_ACTION_POLICY: ${{ inputs.policy }}
        VETTO_ACTION_NET: ${{ inputs.net }}
        VETTO_ACTION_PROFILE: ${{ inputs.profile }}
        VETTO_ACTION_REPORT: ${{ inputs.report }}
        VETTO_ACTION_REPORT_DIR: ${{ inputs.report-dir }}
        VETTO_ACTION_FAIL_ON_BLOCK: ${{ inputs.fail-on-block }}
      run: bash "$GITHUB_ACTION_PATH/entrypoint.sh"

    - name: Upload SARIF report
      if: ${{ inputs.upload-sarif == 'true' && steps.run.outputs.sarif-path != '' && always() }}
      uses: github/codeql-action/upload-sarif@v3
      with:
        sarif_file: ${{ steps.run.outputs.sarif-path }}