[StepSecurity] ci: Harden GitHub Actions

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2023-12-20 00:04:27 +00:00 · 2023-12-20 00:04:27 +00:00 · 4a13f79b76
commit 4a13f79b76
parent 3a2c50d4ac
1 changed files with 5 additions and 0 deletions
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@ -13,6 +13,11 @@ jobs:
  format_code:
    runs-on: ubuntu-latest
    steps:
+    - name: Harden Runner
+      uses: step-security/harden-runner@v2
+      with:
+        egress-policy: audit
+
    - uses: actions/checkout@v4

    - name: Install clang-format