chore: integrate step-security/harden-runner in workflows (#15099)

Redoing #15097 Part of #14879
2026-09-24 15:04:27 +08:00 · 2024-10-16 11:23:00 -07:00
parent ccbb687ca0
commit 8e254cbb07
14 changed files with 229 additions and 1 deletions
@@ -15,6 +15,11 @@ jobs:
  cleanup:
    runs-on: "ubuntu-latest"
    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
+        with:
+          egress-policy: audit
+
      - name: Get PR number
        id: pr_number
        run: |