Skip to content

Commit b002d92

Browse files
committed
GHA: Use step-security/harden-runner
1 parent 3d43548 commit b002d92

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

.github/workflows/ci.yml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -159,6 +159,10 @@ jobs:
159159
runs-on: ubuntu-latest
160160
steps:
161161

162+
- uses: step-security/harden-runner@v2
163+
with:
164+
egress-policy: audit
165+
162166
- name: Checkout
163167
uses: actions/checkout@v4
164168

@@ -197,6 +201,10 @@ jobs:
197201
container: ${{ matrix.image }}
198202
steps:
199203

204+
- uses: step-security/harden-runner@v2
205+
with:
206+
egress-policy: audit
207+
200208
- name: Checkout
201209
uses: actions/checkout@v4
202210

@@ -228,6 +236,10 @@ jobs:
228236
runs-on: macos-latest
229237
steps:
230238

239+
- uses: step-security/harden-runner@v2
240+
with:
241+
egress-policy: audit
242+
231243
- name: Checkout
232244
uses: actions/checkout@v4
233245

@@ -270,6 +282,10 @@ jobs:
270282
runs-on: windows-latest
271283
steps:
272284

285+
- uses: step-security/harden-runner@v2
286+
with:
287+
egress-policy: audit
288+
273289
- name: Checkout
274290
uses: actions/checkout@v4
275291

0 commit comments

Comments
 (0)