[StepSecurity] ci: Harden GitHub Actions (#16)

Signed-off-by: StepSecurity Bot <[email protected]>
jauderho · May 24, 2024 · 61ae87a · 61ae87a
1 parent f5a4fe4
commit 61ae87a
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -6,6 +6,11 @@ jobs:
     name: Run tests
     runs-on: ubuntu-24.04
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
+        with:
+          egress-policy: audit
+
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
       - name: Dockerfilelint