Runtime Security in GitHub Actions using eBPF

In this talk, I demonstrate how eBPF can bring runtime security into GitHub Actions — giving CI/CD pipelines the same level of network visibility and protection we expect from production systems.

It’s a deep dive into how we can trace and enforce network policies to run workflows securely and in real time — all without slowing developers down.

If you’re into eBPF or love pushing observability and security beyond servers, this one’s for you.

What’s inside:

* A quick eBPF intro

* How companies like Cloudflare, Meta, Netflix, and Cisco use it

* The problem with GitHub Actions today

* An eBPF-based Network Policy Engine

* A live demo in action 🚀

And yes — I’ve even designed myself an eBPFChirp shirt with a little joke on the back:

“This shirt passed the verifier.” 😅

Thanks for reading eBPFChirp! This post is public so feel free to share it.