try using harden-runner#504
Conversation
try using harden-runner in doc as code
License Check Results🚀 The license check job ran with the Bazel command: bazel run --lockfile_mode=error //src:license-checkStatus: Click to expand output |
|
The created documentation from the pull request is available at: docu-html |
| @@ -27,7 +27,14 @@ jobs: | |||
| matrix: | |||
There was a problem hiding this comment.
Overall this seems good.
What I'm missing a bit is some explanation / documentation.
Just inside the PR/Commit body would be fine or so.
Cause it's a bit unclear to me (without reading through all the docs) why this egrees-policy is and what it exactly does (beyond 'monitoring outgoig trafic').
There was a problem hiding this comment.
updated the PR description in short
AlexanderLanin
left a comment
There was a problem hiding this comment.
Merging now, so we can have a look at it in the #infrastructure meeting later today
|
Nope, not merging. The author is a mess. We have:
Can you please recreate the commit with one clear author information? |
his PR adds the step-security/harden-runner@v2.18.0 action to 6 GitHub workflows to improve the security posture of the Eclipse SCORE project. The hardening runner monitors and audits egress (outbound) network traffic from CI/CD jobs, helping to detect and prevent unauthorized or suspicious network activity.