Restore the harden-runner step.

paulhuggett · Oct 18, 2023 · cc57c8d · cc57c8d
1 parent 84eb971
commit cc57c8d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/sonarcloud.yaml b/.github/workflows/sonarcloud.yaml
@@ -16,6 +16,11 @@ jobs:
       CLANG_VERSION: 14
 
     steps:
+      - name: Harden Runner
+         uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0
+         with:
+           egress-policy: audit
+
       - name: Install clang
         run: |
           if ! command -v "clang++-${{ env.CLANG_VERSION }}"