harden runner

Author: avivkeller

.github/workflows/compare-builds.yml

@@ -97,6 +97,11 @@ jobs:
     runs-on: ubuntu-latest
     needs: compare
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        with:
+          egress-policy: audit
+
       - name: Download all comparison artifacts
         uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with: