Skip to content

try using harden-runner #504

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
srinivasugithub wants to merge 5 commits into from
+33 −0
Closed

try using harden-runner #504

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
dc45bfa
try using harden-runner in doc as code
kandukurisrinivasu Apr 20, 2026
0c98393
Merge pull request #1 from bgsw-contrib/feature/harden-runner
srinivasugithub Apr 21, 2026
aad441f
Merge branch 'eclipse-score:main' into main
bgsw-contrib[bot] Apr 22, 2026
97f864a
Merge branch 'eclipse-score:main' into main
bgsw-contrib[bot] Apr 23, 2026
82b4a46
Merge branch 'eclipse-score:main' into main
bgsw-contrib[bot] Apr 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions .github/workflows/consumer_test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,14 @@ jobs:
matrix:
Copy link
Copy Markdown
Contributor

@MaximilianSoerenPollak MaximilianSoerenPollak Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overall this seems good.
What I'm missing a bit is some explanation / documentation.
Just inside the PR/Commit body would be fine or so.
Cause it's a bit unclear to me (without reading through all the docs) why this egrees-policy is and what it exactly does (beyond 'monitoring outgoig trafic').

Copy link
Copy Markdown
Contributor Author

@srinivasugithub srinivasugithub Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

updated the PR description in short

consumer: ["process_description", "score", "module_template"]


steps:
- name: 🛡️ Harden Runner
if: github.repository_owner == 'eclipse-score'
uses: step-security/harden-runner@v2.18.0
with:
egress-policy: audit

- name: Checkout PR
uses: actions/checkout@v4.2.2

Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/link_check.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,11 @@ jobs:
link-check:
runs-on: ubuntu-latest
steps:
- name: 🛡️ Harden Runner
if: github.repository_owner == 'eclipse-score'
uses: step-security/harden-runner@v2.18.0
with:
egress-policy: audit
- name: Checkout repo
uses: actions/checkout@v4

Expand Down
6 changes: 6 additions & 0 deletions .github/workflows/lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,12 @@ jobs:
runs-on: ubuntu-latest
continue-on-error: true
steps:

- name: 🛡️ Harden Runner
if: github.repository_owner == 'eclipse-score'
uses: step-security/harden-runner@v2.18.0
with:
egress-policy: audit
- name: Checkout repository
uses: actions/checkout@v4.2.2

Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/renovate.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,11 @@ jobs:
renovate:
runs-on: ubuntu-latest
steps:
- name: 🛡️ Harden Runner
if: github.repository_owner == 'eclipse-score'
uses: step-security/harden-runner@v2.18.0
with:
egress-policy: audit
- name: Checkout repository
uses: actions/checkout@v4.2.2

Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,11 @@ jobs:
code:
runs-on: ubuntu-latest
steps:
- name: 🛡️ Harden Runner
if: github.repository_owner == 'eclipse-score'
uses: step-security/harden-runner@v2.18.0
with:
egress-policy: audit
- name: Checkout repository (Handle all events)
uses: actions/checkout@v4.2.2
with:
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/test_links.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,11 @@ jobs:
outputs:
should_create_issue: ${{ steps.detect.outputs.issue_needed }}
steps:
- name: 🛡️ Harden Runner
if: github.repository_owner == 'eclipse-score'
uses: step-security/harden-runner@v2.18.0
with:
egress-policy: audit
- name: Checkout repository
uses: actions/checkout@v4.2.2

Expand Down
Loading