René's URL Explorer Experiment


Title: Security - Pullfrog

Open Graph Title: Security - Pullfrog

X Title: Security - Pullfrog

Description: How Pullfrog keeps secrets, tokens and your repository safe from a prompt-injected agent.

Open Graph Description: How Pullfrog keeps secrets, tokens and your repository safe from a prompt-injected agent.

X Description: How Pullfrog keeps secrets, tokens and your repository safe from a prompt-injected agent.

Opengraph URL: https://docs.pullfrog.com/security

Generator: Mintlify

direct link

Domain: docs.pullfrog.com

Hey, it has json ld scripts: 
{"@context":"https://schema.org","@type":"WebSite","name":"Pullfrog","publisher":{"@type":"Organization","name":"Pullfrog"},"provider":{"@type":"Organization","name":"Mintlify","url":"https://mintlify.com"}}
 
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://docs.pullfrog.com/#organization","name":"Pullfrog","url":"https://docs.pullfrog.com","logo":{"@type":"ImageObject","url":"https://mintcdn.com/pullfrog/t6H068czmkQsY8LJ/logo/light.png?fit=max&auto=format&n=t6H068czmkQsY8LJ&q=85&s=420a54aaae2b7194c115e243d23b4f51"}},{"@type":"WebSite","@id":"https://docs.pullfrog.com#website","name":"Pullfrog","url":"https://docs.pullfrog.com","publisher":{"@id":"https://docs.pullfrog.com/#organization"}},{"@type":"WebPage","@id":"https://docs.pullfrog.com/security#webpage","url":"https://docs.pullfrog.com/security","name":"Security","description":"How Pullfrog keeps secrets, tokens and your repository safe from a prompt-injected agent.","dateModified":"2026-11-06T23:20:25.257Z","isPartOf":{"@id":"https://docs.pullfrog.com#website"},"breadcrumb":{"@id":"https://docs.pullfrog.com/security#breadcrumb"}},{"@type":"BreadcrumbList","@id":"https://docs.pullfrog.com/security#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Administration","item":"https://docs.pullfrog.com/organizations"},{"@type":"ListItem","position":2,"name":"Security","item":"https://docs.pullfrog.com/security"}]},{"@type":["Article","TechArticle"],"@id":"https://docs.pullfrog.com/security#article","headline":"Security","name":"Security","description":"How Pullfrog keeps secrets, tokens and your repository safe from a prompt-injected agent.","url":"https://docs.pullfrog.com/security","mainEntityOfPage":{"@id":"https://docs.pullfrog.com/security#webpage"},"image":"https://docs.pullfrog.com/og/security.png","dateModified":"2026-11-06T23:20:25.257Z","publisher":{"@id":"https://docs.pullfrog.com/#organization"},"isPartOf":{"@id":"https://docs.pullfrog.com#website"}}]}
application-namePullfrog
msapplication-config/mintlify-assets/_mintlify/favicons/pullfrog/sZ8lmWygNY8nxs1Z/_generated/favicon/browserconfig.xml
apple-mobile-web-app-titlePullfrog
msapplication-TileColor#16A34A
og:site_namePullfrog
og:imagehttps://pullfrog.mintlify.site/og/security.png
og:image:width1200
og:image:height630
og:typewebsite
twitter:cardsummary_large_image
twitter:imagehttps://pullfrog.mintlify.site/og/security.png
twitter:image:width1200
twitter:image:height630

Links:

/llms.txthttps://docs.pullfrog.com/llms.txt
Skip to main contenthttps://docs.pullfrog.com/security#content-area
Pullfrog home pagehttps://docs.pullfrog.com/
GitHubhttps://github.com/pullfrog/pullfrog
Consolehttps://pullfrog.com/console
Consolehttps://pullfrog.com/console
Introductionhttps://docs.pullfrog.com/
Getting startedhttps://docs.pullfrog.com/getting-started
Comparisonshttps://docs.pullfrog.com/comparisons
Direct promptinghttps://docs.pullfrog.com/direct-prompting
Iterating in GitHubhttps://docs.pullfrog.com/github
PR reviewshttps://docs.pullfrog.com/pr-reviews
Issue enrichmenthttps://docs.pullfrog.com/issue-enrichment
Coding taskshttps://docs.pullfrog.com/coding-tasks
Flagshttps://docs.pullfrog.com/flags
Learningshttps://docs.pullfrog.com/learnings
Asking other modelshttps://docs.pullfrog.com/other-models
Watch a PRhttps://docs.pullfrog.com/watch
Model accesshttps://docs.pullfrog.com/model-access
Modelshttps://docs.pullfrog.com/models
API keyshttps://docs.pullfrog.com/keys
Billinghttps://docs.pullfrog.com/billing
Permissionshttps://docs.pullfrog.com/organizations
Securityhttps://docs.pullfrog.com/security
CLI configurationhttps://docs.pullfrog.com/cli-configuration
Versions & pinninghttps://docs.pullfrog.com/versioning
Toolshttps://docs.pullfrog.com/tools
CI integrationhttps://docs.pullfrog.com/headless-action
System prompthttps://docs.pullfrog.com/security#system-prompt
Untrusted input isolationhttps://docs.pullfrog.com/security#untrusted-input-isolation
Secret maskinghttps://docs.pullfrog.com/security#secret-masking
Secret isolationhttps://docs.pullfrog.com/security#secret-isolation
Shell environment scrubbinghttps://docs.pullfrog.com/security#shell-environment-scrubbing
Lifecycle scriptshttps://docs.pullfrog.com/security#lifecycle-scripts
Default allowed variableshttps://docs.pullfrog.com/security#default-allowed-variables
Environment allowlisthttps://docs.pullfrog.com/security#environment-allowlist
Filesystem sandboxhttps://docs.pullfrog.com/security#filesystem-sandbox
Commands an agent starts itselfhttps://docs.pullfrog.com/security#commands-an-agent-starts-itself
Self-hosted runnershttps://docs.pullfrog.com/security#self-hosted-runners
What the container fallback guaranteeshttps://docs.pullfrog.com/security#what-the-container-fallback-guarantees
When it does not engagehttps://docs.pullfrog.com/security#when-it-does-not-engage
Short-lived tokenshttps://docs.pullfrog.com/security#short-lived-tokens
Permission checkshttps://docs.pullfrog.com/security#permission-checks
Signed commitshttps://docs.pullfrog.com/security#signed-commits
Code pusheshttps://docs.pullfrog.com/security#code-pushes
System prompthttps://docs.pullfrog.com/security#system-prompt
Untrusted input isolationhttps://docs.pullfrog.com/security#untrusted-input-isolation
Secret maskinghttps://docs.pullfrog.com/security#secret-masking
Secret isolationhttps://docs.pullfrog.com/security#secret-isolation
Shell environment scrubbinghttps://docs.pullfrog.com/security#shell-environment-scrubbing
Lifecycle scriptshttps://docs.pullfrog.com/security#lifecycle-scripts
Filesystem sandboxhttps://docs.pullfrog.com/security#filesystem-sandbox
Short-lived tokenshttps://docs.pullfrog.com/security#short-lived-tokens
Permission checkshttps://docs.pullfrog.com/security#permission-checks
Code pusheshttps://docs.pullfrog.com/security#code-pushes
https://docs.pullfrog.com/security#system-prompt
https://docs.pullfrog.com/security#untrusted-input-isolation
https://docs.pullfrog.com/security#secret-masking
https://docs.pullfrog.com/security#secret-isolation
shell environment scrubbinghttps://docs.pullfrog.com/security#shell-environment-scrubbing
API keyshttps://docs.pullfrog.com/keys
https://docs.pullfrog.com/security#shell-environment-scrubbing
default allowed variableshttps://docs.pullfrog.com/security#default-allowed-variables
environment allowlisthttps://docs.pullfrog.com/security#environment-allowlist
Self-hosted runnershttps://docs.pullfrog.com/security#self-hosted-runners
https://docs.pullfrog.com/security#lifecycle-scripts
environment allowlisthttps://docs.pullfrog.com/security#environment-allowlist
https://docs.pullfrog.com/security#default-allowed-variables
environment allowlisthttps://docs.pullfrog.com/security#environment-allowlist
https://docs.pullfrog.com/security#environment-allowlist
https://docs.pullfrog.com/security#filesystem-sandbox
https://docs.pullfrog.com/security#commands-an-agent-starts-itself
https://docs.pullfrog.com/security#self-hosted-runners
actions-runner-controllerhttps://github.com/actions/actions-runner-controller
https://docs.pullfrog.com/security#what-the-container-fallback-guarantees
https://docs.pullfrog.com/security#when-it-does-not-engage
ARC charthttps://github.com/actions/actions-runner-controller/blob/master/charts/gha-runner-scale-set/values.yaml
https://docs.pullfrog.com/security#short-lived-tokens
https://docs.pullfrog.com/security#permission-checks
https://docs.pullfrog.com/security#signed-commits
planhttps://docs.pullfrog.com/billing
https://docs.pullfrog.com/security#code-pushes
cross-repo runshttps://docs.pullfrog.com/flags#cross-repo
Permissionshttps://docs.pullfrog.com/organizations
CLI configurationhttps://docs.pullfrog.com/cli-configuration
xhttps://x.com/pullfrogai
githubhttps://github.com/pullfrog
Powered byThis documentation is built and hosted on Mintlify, a developer documentation platformhttps://www.mintlify.com?utm_campaign=poweredBy&utm_medium=referral&utm_source=pullfrog

Viewport: width=device-width, initial-scale=1, viewport-fit=cover

URLs of crawlers that visited me.