chore: integrate step-security/harden-runner in workflows (#15099)

Redoing #15097 Part of #14879
2026-09-24 15:04:27 +08:00 · 2024-10-16 11:23:00 -07:00
parent ccbb687ca0
commit 8e254cbb07
14 changed files with 229 additions and 1 deletions
@@ -10,10 +10,18 @@ on:
    paths:
      - "docs/**"

+permissions:
+  contents: read
+
 jobs:
  check-docs:
    runs-on: ubuntu-latest
    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
+        with:
+          egress-policy: audit
+
      - name: Checkout
        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1