Skip to content

Commit e8c22d2

Browse files
stepsecurity-app[bot]MiguelLZPF
authored andcommitted
chore: [StepSecurity] Apply security best practices (#688)
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com> Signed-off-by: Miguel_LZPF <miguel.carpena@io.builders>
1 parent ea7235f commit e8c22d2

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

.github/workflows/ats.publish.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -155,6 +155,11 @@ jobs:
155155
needs: [contracts, sdk]
156156
if: always()
157157
steps:
158+
- name: Harden the runner (Audit all outbound calls)
159+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
160+
with:
161+
egress-policy: audit
162+
158163
- name: Report Results
159164
run: |
160165
echo "## ATS Publish Results" >> $GITHUB_STEP_SUMMARY

.github/workflows/mp.publish.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,11 @@ jobs:
109109
needs: [mass-payout]
110110
if: always()
111111
steps:
112+
- name: Harden the runner (Audit all outbound calls)
113+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
114+
with:
115+
egress-policy: audit
116+
112117
- name: Report Results
113118
run: |
114119
echo "## Mass Payout Publish Results" >> $GITHUB_STEP_SUMMARY

0 commit comments

Comments
 (0)