v2.7.0

What's Changed

Release 2.7.0 by @varunsh-coder and @h0x0er in #376
This release:

1. Updates the node runtime to node20
2. Adds capability to inspect outbound HTTPS traffic on GitHub-hosted and self-hosted VM runners

Full Changelog: v2...v2.7.0

v2.6.1

What's Changed

Release v2.6.1 by @varunsh-coder and @h0x0er in #356
This release:

1. Improves the job summary markdown written by the Harden-Runner Action
2. Improves detection of cache endpoint used by the job
3. Detects use of Kubernetes mode in Actions Runner Controller (ARC) based runners
4. Updates dependencies

Full Changelog: v2...v2.6.1

v2.6.0

What's Changed

Release v2.6.0 by @varunsh-coder in #346

This release adds support for self-hosted Virtual Machine runners (e.g. on EC2).

• Both ephemeral and persistent self-hosted VM runners are supported
• Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm

Full Changelog: v2...v2.6.0

v2.5.1

What's Changed

• Updated default allowed endpoints to include *.actions.githubusercontent.com. GitHub Actions recently started making calls to additional sub-domains for this domain. Please update to this latest version of harden-runner to allow these new endpoints.
• Update README.md by @varunsh-coder in #326
• Bump step-security/harden-runner from 2.4.1 to 2.5.0 by @dependabot in #327

Full Changelog: v2...v2.5.1

v2.5.0

What's Changed

Release v2.5.0 by @h0x0er and @varunsh-coder in #325

This release:

1. Adds support for Actions Runner Controller (ARC) environment
2. Improves the job summary markdown

Full Changelog: v2...v2.5.0

v2.4.1

What's Changed

Release v2.4.1 by @varunsh-coder and @Devils-Knight in #309

This release

1. Shows a preview of the network events in the job summary markdown
2. Uses a fallback DNS service from Cloudflare in addition to Google DNS to improve reliability

Full Changelog: v2...v2.4.1

v2.4.0

What's Changed

• Release v2.4.0 by @varunsh-coder and @h0x0er in #292
  Adds support for wildcard domains in block mode. e.g. you can add *.data.mcr.microsoft.com:443 to the allowed list, and egress traffic will be allowed to eastus.data.mcr.microsoft.com:443 and westus.data.mcr.microsoft.com:443.
  Link to documentation.
• Bump actions/checkout from 3.5.0 to 3.5.2 by @dependabot in #277
• Bump github/codeql-action from 2.2.11 to 2.2.12 by @dependabot in #278
• Bump step-security/harden-runner from 2.3.0 to 2.3.1 by @dependabot in #282
• Added a workflow for reviewing code changes using stepsecurity code reviewer by @boahc077 in #290

Full Changelog: v2...v2.4.0

v2.3.1

What's Changed

• Release v2.3.1 by @arjundashrath and @varunsh-coder in #281
  Fixes #279 and #275
• Update README.md by @varunsh-coder in #267
• Bump step-security/harden-runner from 2.2.1 to 2.3.0 by @dependabot in #268
• Bump codecov/codecov-action from 3.1.1 to 3.1.2 by @dependabot in #273
• Bump ossf/scorecard-action from 2.1.2 to 2.1.3 by @dependabot in #265
• Bump actions/checkout from 3.3.0 to 3.5.0 by @dependabot in #261
• Bump github/codeql-action from 2.2.6 to 2.2.11 by @dependabot in #270

Full Changelog: v2...v2.3.1

v2.3.0

What's Changed

• Enable setting policy via insights website (link to documentation) by @h0x0er and @varunsh-coder in #266
  The Policy Store helps you manage Harden Runner policies without altering your workflow files.
• Update README.md by @varunsh-coder in #255
• Bump github/codeql-action from 2.2.4 to 2.2.6 by @dependabot in #254
• Bump step-security/harden-runner from 2.2.0 to 2.2.1 by @dependabot in #256

Full Changelog: v2...v2.3.0

v2.2.1

What's Changed

• Fix issue to get cache endpoint by @h0x0er in #253
  Harden runner has the ability to automatically detect the cache endpoint used by each job. When Harden runner is used in block mode, this endpoint is added to the list of allowed endpoints. A fix has been implemented to improve this feature by updating the logic used to fetch the cache endpoint. This update involves using code from the actions/cache library to ensure the endpoint is properly retrieved.
• Update README.md by @varunsh-coder in #247
• Bump step-security/harden-runner from 2.1.0 to 2.2.0 by @dependabot in #248
• Bump github/codeql-action from 2.1.38 to 2.2.4 by @dependabot in #244

Full Changelog: v2...v2.2.1