GitHub Actions
Portable execution includes bounded manual and configured push workflows, with pinned Node24 action execution in a qualified public-dependency profile. Native hosted PR tests can run one operator-approved Actions shell workflow.
GOLF Product / Execution
Keep the source. Know what runs.
Golf inspects workflow files and executes explicitly supported profiles with exact-source evidence, approved images and recorded outcomes.
Developer preview · capability review October 14, 202601 / EXECUTION
Compatibility is a tested profile.
A YAML file is input. Unsupported semantics are refused rather than treated as a successful build.
GitLab
Bounded native shell and stock GitLab Runner proofs exist. They do not establish full coordinator, includes, child-pipeline, services or event compatibility.
Containers and customer runners
Cloudflare Containers run approved native tests and proposals. Customer-runner profiles retain separate enrollment, networking, capacity and acceptance limits; socketless build receipts do not imply image publication.
02 / REVIEW THE OUTPUT
Keep evidence with the commit.
The native Actions page shows the latest 50 stored PR runs. Workflow settings inspect the default-branch source and start nothing.
Secrets with exact approval
Native repository values are encrypted under a Secrets Store key. Only an approved exact-commit PR workflow receives them. The hosted proof showed the secret reached a step and its exact text was masked in retained output.
Managed image registry
New hosted installs publish the approved CI image through Cloudflare’s managed registry. Golf retains repository-scoped admission and digest receipts; broader image scanning and trust policies remain separate acceptance.
Policy limits
Repository run switches apply at admission and do not cancel admitted jobs or govern proposals. Native manual dispatch, broad triggers, workflow editing and full engine parity remain open.
Make your first move.
Explore the hosted public repository, request enrollment for private workflows, or start your own portable installation.