actions-marketplace-validations/Harden-Runner
Harden-Runner provides runtime security for GitHub-hosted and self-hosted runners
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| allowed-endpoints | Only these endpoints will be allowed if egress-policy is set to block | no | "" |
| egress-policy | Policy for outbound traffic, can be either audit or block | no | block |
| token | Used to avoid github rate limiting | — | ${{ github.token }} |
| disable-telemetry | Disable sending telemetry to StepSecurity API, can be set to true or false. This can only be set to true when egress-policy is set to block | no | false |
| disable-sudo | Disable sudo access for the runner account. Note: This parameter will be deprecated in the future. Please use disable-sudo-and-containers instead. | no | false |
| disable-sudo-and-containers | Disable sudo and container access for the runner account | no | false |
| disable-file-monitoring | Disable file monitoring | no | false |
| policy | Policy name to be used from the policy store | no | "" |
Outputs
no outputs