From 8abd72e8575dec6357dfd38d72bdf4d7e6ea7409 Mon Sep 17 00:00:00 2001
From: "stepsecurity-app[bot]"
 <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Date: Fri, 31 Jul 2026 09:27:01 +0200
Subject: [PATCH] feat(security): security best practices from StepSecurity
 (#12254)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
---
 .github/workflows/ui-e2e-tests-v2.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/ui-e2e-tests-v2.yml b/.github/workflows/ui-e2e-tests-v2.yml
index 50332daf6d..6fe4f480af 100644
--- a/.github/workflows/ui-e2e-tests-v2.yml
+++ b/.github/workflows/ui-e2e-tests-v2.yml
@@ -415,6 +415,11 @@ jobs:
     permissions:
       contents: read
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        with:
+          egress-policy: audit
+
       - name: Report unavailable E2E tests
         run: |
           echo "## E2E Tests Skipped" >> "$GITHUB_STEP_SUMMARY"