Skip to content

Commit 82f334a

Browse files
chore: [StepSecurity] Apply security best practices (#688)
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
1 parent d2dbcda commit 82f334a

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

.github/workflows/ats.publish.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -146,6 +146,11 @@ jobs:
146146
- sdk
147147
if: ${{ always() }}
148148
steps:
149+
- name: Harden the runner (Audit all outbound calls)
150+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
151+
with:
152+
egress-policy: audit
153+
149154
- name: Report Results
150155
run: |
151156
echo "## ATS Publish Results" >> "${GITHUB_STEP_SUMMARY}"

.github/workflows/mp.publish.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -103,6 +103,11 @@ jobs:
103103
- mass-payout
104104
if: ${{ always() }}
105105
steps:
106+
- name: Harden the runner (Audit all outbound calls)
107+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
108+
with:
109+
egress-policy: audit
110+
106111
- name: Report Results
107112
run: |
108113
echo "## Mass Payout Publish Results" >> "${GITHUB_STEP_SUMMARY}"

0 commit comments

Comments
 (0)