fix: add Harden Runner step to all publish jobs

Signed-off-by: Miguel_LZPF <[email protected]>
hashgraph · Oct 24, 2024 · 655745b · 655745b
1 parent e684e68
commit 655745b
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -66,6 +66,11 @@ jobs:
 
     steps:
       # * Initial steps
+      - name: Harden Runner
+        uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 #v2.8.0
+        with:
+          egress-policy: audit
+
       - name: Checkout repository
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
@@ -111,6 +116,11 @@ jobs:
 
     steps:
       # * Initial steps
+      - name: Harden Runner
+        uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 #v2.8.0
+        with:
+          egress-policy: audit
+
       - name: Checkout repository
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6