[StepSecurity] Apply security best practices (#4539)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2026-05-21 05:35:23 +00:00 · 2024-12-15 09:31:21 -08:00
parent 6a2ae22a5a
commit 4003f8da02
13 changed files with 374 additions and 57 deletions
@@ -17,6 +17,11 @@ jobs:
      issues: read
      pull-requests: write
    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          egress-policy: audit
+
      - name: 'Download artifact'
        uses: actions/github-script@98814c53be79b1d30f795b907e553d8679345975 # v6.4.0
        with: