diff --git a/.github/workflows/workflow-hardening.yml b/.github/workflows/workflow-hardening.yml index 1ffc1e8..dc262d4 100644 --- a/.github/workflows/workflow-hardening.yml +++ b/.github/workflows/workflow-hardening.yml @@ -16,6 +16,11 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: + - name: Harden the runner (Audit all outbound calls) + uses: step-security/harden-runner@v2 + with: + egress-policy: audit + - name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2