Project Summary
Fail a pull request when a change to your SPF record would stop a sender that still sends mail from passing SPF. It's for teams that keep DNS in a repository: DNSControl, octoDNS, Terraform or a plain file.
The action sends the proposed record to DomainCanary, which resolves both the published record and the proposed one and compares them.
Without an API key it checks syntax, the 10-lookup limit, a +all ending, and which addresses the change removes. A removed range is a warning, because there's no way to tell from DNS alone whether anything still sends from it.
With an API key it also checks each removed range against the senders in your DMARC reports from the last 90 days, and fails the check when one of them sent mail. The domain has to be verified in your DomainCanary account.
In a Nutshell, DomainCanary SPF pre-flight...
- ...
- ...
-
...
has a codebase with a very short history
maintained by a small development team
with stable Y-O-Y commits -
...
took an estimated 1 years of effort (COCOMO model)
starting with its first commit in September, 2026
ending with its most recent commit 7 days ago
Quick Reference
This Project has No vulnerabilities Reported Against it
Did You Know...
-
...
there are over 3,000 projects on the Open Hub with security vulnerabilities reported against them
-
...
learn about Open Hub updates and features on the Open Hub blog
-
...
in 2016, 47% of companies did not have formal process in place to track OS code
-
...
search using multiple tags to find exactly what you need
30 Day SummarySep 26 2026 — Oct 26 2026
|
12 Month SummaryOct 26 2025 — Oct 26 2026
|
