Community
StepSecurity Defends CISA CI/CD Pipelines
CISA open source projects use Harden Runner (Community Tier) to defend their CI/CD pipelines from supply chain attacks
Latest Build Secured
Total Builds Secured Last Week
65197
How-To
StepSecurity Harden-Runner secures CI/CD runners by providing network visibility and enforcing network egress filtering.
01
Update Your GitHub Actions Workflow
steps:
- uses: step-security/harden-runner@v2
with:
egress-policy: audit
Automate this change using a pull request.
02
Run Your Workflow
Execute your workflow as usual.
03
Review Security Insights
After completion, check the GitHub Actions Job summary for a link to detailed security insights, detections, and recommendations.
