feat(security): security best practices from StepSecurity (#12254)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
This commit is contained in:
stepsecurity-app[bot]
2026-07-31 09:27:01 +02:00
committed by GitHub
parent 9185b043da
commit 8abd72e857
+5
View File
@@ -415,6 +415,11 @@ jobs:
permissions:
contents: read
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
with:
egress-policy: audit
- name: Report unavailable E2E tests
run: |
echo "## E2E Tests Skipped" >> "$GITHUB_STEP_SUMMARY"