step-security/harden-runner
actions
pkg:githubactions/step-security/harden-runner
8,284 Dependabot PRs
10 days ago
2,657 repositories
15 repositories
Security Advisories
Harden-Runner allows evasion of 'disable-sudo' policy
Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)
Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)
Harden-Runner: Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)
Harden-Runner has a command injection weaknesses in `setup.ts` and `arc-runner.ts`
Recent PRs
Bump the minor-updates group across 1 directory with 3 updates
gemal/node-css-image-checker #471
Bump the ci group with 2 updates
score-spec/sample-score-app #97
chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0
Azure/ARO-RP #4965
chore(ci): Bump the actions group across 1 directory with 2 updates
IvanAnishchuk/eth-protocol-fellowship #30
Bump step-security/harden-runner from 2.19.4 to 2.20.0
chore(deps): bump the github-actions group with 3 updates
ci: bump the actions group across 1 directory with 3 updates
build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0
build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 in the github-actions group
Bump step-security/harden-runner from 2.19.4 to 2.20.0
Ardulink/Ardulink-2 #1080
Bump step-security/harden-runner from 2.19.3 to 2.19.4
chore(deps): bump the all group with 5 updates
tektoncd/cli #3002
chore(deps): bump the all group with 5 updates
tektoncd/cli #2995
chore(deps): bump the github-actions group across 1 directory with 15 updates
chore(deps): bump the github-actions group across 1 directory with 7 updates
chore(deps)(deps): bump the github-actions-minor group across 1 directory with 14 updates
Bump the dependencies group across 1 directory with 15 updates
oyakh1/hiero-mirror-node--017 #32
Bump the dependencies group across 1 directory with 15 updates
oyakh1/hiero-mirror-node--029 #33
chore(deps): bump step-security/harden-runner from 2.12.0 to 2.19.4
Bump the github-actions group across 2 directories with 10 updates
NatLibFi/Annif #945
Bump the github-actions group across 1 directory with 15 updates
Bump the dependencies group across 1 directory with 11 updates
oyakh1/hiero-mirror-node--039 #30
Bump the dependencies group across 1 directory with 11 updates
oyakh1/hiero-mirror-node--033 #31
chore(deps): bump the all group across 1 directory with 9 updates
nodejs/node-addon-api #1736
Bump the github-actions group across 1 directory with 5 updates
chore(deps): bump step-security/harden-runner from 2.12.0 to 2.19.4
Bump step-security/harden-runner from 2.16.1 to 2.19.4
lurkydismal/CCCaster #115
Bump the dependencies group across 1 directory with 11 updates
oyakhilo20/hiero-mirror-node--020 #31
Bump the dependencies group across 1 directory with 11 updates
oyakhilo20/hiero-mirror-node--040 #31
build(dependencies): bump the github-actions group across 1 directory with 13 updates
wearefrank/ci-cd-templates #111
chore(deps): bump the github-actions group across 1 directory with 18 updates
Chore: Bump step-security/harden-runner from 2.16.0 to 2.19.4
chore(deps): bump the actions group with 4 updates
vex-protocol/vex-protocol #233
Bump the action-packages group across 1 directory with 4 updates
fiaisis/fia-auth #213
build(deps): bump the actions-deps group across 1 directory with 11 updates
caddyserver/caddy #7795
chore(deps): bump the github-actions group with 2 updates
NodeSecure/report #513
ci: bump the actions-minor-patch group across 1 directory with 5 updates
parley-wallet/parley-protocol-spec #11
deps: Bump the actions group with 3 updates
chore(deps): bump step-security/harden-runner from 2.17.0 to 2.19.4
⬆️ gha: Bump the github-actions group across 1 directory with 14 updates
bendoerr-terraform-modules/tflint-plugin-version-update #47
build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.4
utilitywarehouse/vault-kube-cloud-credentials #414
chore(ci)(deps): bump step-security/harden-runner from 2.19.1 to 2.19.4
dytsou/intern-corner-scheduler #103
deps: Bump the actions group with 7 updates
chore(deps): bump the github-actions group across 1 directory with 5 updates
Bump the dependencies group across 1 directory with 10 updates
oyakh1/hiero-mirror-node--006 #27
github-actions(deps): bump step-security/harden-runner from 2.4.0 to 2.19.4
chore(deps): bump the github-actions group across 1 directory with 15 updates
actions-marketplace-validations/afadesigns_zshellcheck #3
chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4
eclipse-tractusx/tractusx-edc #2848
Bump the actions-updates group across 1 directory with 3 updates
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.4
hiero-ledger/hiero-website #469
Package Details
| Name: | step-security/harden-runner |
| Ecosystem: | actions |
| PURL Type: | githubactions |
| Package URL: | pkg:githubactions/step-security/harden-runner |
| JSON API: | View JSON |
Security Advisories
Package Information
Harden-Runner provides runtime security for GitHub-hosted and self-hosted runners
| Repository: | https://github.com/step-security/harden-runner |
| Homepage: | https://www.stepsecurity.io |
| Latest Release: |
v2.12.0
over 1 year ago |
| Dependent Repos: | 497 |
| Dependent Packages: | 0 |
| Ranking: | Top 1.556% by dependent repos Top 0.0% by dependent pkgs |