Add: Harden Runner

Stirling-Tools · Jan 10, 2025 · d4b75f9 · d4b75f9
1 parent 9273b16
commit d4b75f9
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/releaseArtifacts.yml b/.github/workflows/releaseArtifacts.yml
@@ -82,6 +82,11 @@ jobs:
           - enable_security: false
             file_suffix: ""
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
+        with:
+          egress-policy: audit
+
       - name: Download build artifacts
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
@@ -155,6 +160,11 @@ jobs:
           - enable_security: false
             file_suffix: ""
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
+        with:
+          egress-policy: audit
+
       - name: Download signed artifacts
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with: