Skip to content

Apply security best practicesSigned-off-by: StepSecurity Bot <bot@ste…

6f6b003
Select commit
Loading
Failed to load commit list.
Open

ci: apply security best practices #125

Apply security best practicesSigned-off-by: StepSecurity Bot <bot@ste…
6f6b003
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Harden-Runner succeeded Aug 8, 2025 in 5m 3s

No anomalous activity on CI/CD runners

No new Harden-Runner detections for this pull request.

Details

Harden-Runner monitors all outbound traffic from each job at the DNS and network layers to ensure that CI/CD runners do not communicate with unauthorized destinations.
This reduces the risk of CI/CD secrets and source code being exfiltrated.

📋 Monitored GitHub Actions workflow runs

The following GitHub Actions workflow runs were monitored as part of this pull request.

Workflow Run ID Unique Destinations Actions Used Detailed Insights
codeql.yml 16834420948 3 3 View Insights
lint-pr-title.yml 16834420919 2 3 View Insights
test.yml 16834420954 2 3 View Insights
lint-pr-title-preview-validateSingleCommit.yml 16834420962 2 2 View Insights
lint-pr-title-preview-ignoreLabels.yml 16834420937 2 2 View Insights
guarddog.yml 16834421063 - - Harden-Runner not enabled
lint-pr-title-preview-outputErrorMessage.yml 16834420946 2 3 View Insights
lint-pr-title-preview.yml 16834420963 2 2 View Insights
dependency-review.yml 16834420965 3 3 View Insights

📚 Learn More

You can learn more about this GitHub check here