Merge pull request #338 from step-security-bot/stepsecurity_remediati…

…on_1737991805 [StepSecurity] ci: Harden GitHub Actions
coveooss · Jan 27, 2025 · 0840249 · 0840249
2 parents 46649f9 + cf31bf2
commit 0840249
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/tag.yml b/.github/workflows/tag.yml
@@ -13,6 +13,11 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Setup Go
         uses: actions/setup-go@v5
         with:

diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
@@ -14,6 +14,11 @@ jobs:
       contents: write
       pull-requests: write
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Checkout Repository
         uses: actions/checkout@v4
         with: