[StepSecurity] ci: Harden GitHub Actions (#477)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Co-authored-by: Alan Jowett <alanjo@microsoft.com>
iovisor · May 20, 2024 · d5059c4 · d5059c4
1 parent f245933
commit d5059c4
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/fuzzing.yml b/.github/workflows/fuzzing.yml
@@ -23,6 +23,11 @@ jobs:
     runs-on: ${{ matrix.platform }}
 
     steps:
+    - name: Harden Runner
+      uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+      with:
+        egress-policy: audit
+
     - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
       with:
         submodules: 'recursive'