step-security/harden-runner
actions
pkg:githubactions/step-security/harden-runner
8,631 Dependabot PRs
about 3 hours ago
2,853 repositories
94 repositories
Security Advisories
Harden-Runner allows evasion of 'disable-sudo' policy
Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)
Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)
Harden-Runner: Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)
Harden-Runner has a command injection weaknesses in `setup.ts` and `arc-runner.ts`
Recent PRs
build(deps): bump the actions group across 1 directory with 5 updates
competemath/tengoku #768
[CI] Bump the all-actions group with 5 updates
google/zerocopy #3917
chore(deps)(deps): bump step-security/harden-runner from 2.22.2 to 2.22.4
AOSSIE-Org/OpenVerifiableLLM #309
Bump the actions group with 7 updates
kubernetes/release #4618
ci: bump the actions group across 1 directory with 9 updates
KalarisLabs/research-agent-skills #2018
build(deps): bump the actions group across 1 directory with 5 updates
chainguard-dev/vulnerability-scanner-support #165
Bump step-security/harden-runner from 2.22.2 to 2.22.3 in the github-actions group
knu/inplace #7
ci(deps): bump the github-actions group across 1 directory with 2 updates
epam/ai-dial-analytics-enrichment-runner #7
ci(deps): bump the github-actions group across 1 directory with 2 updates
epam/ai-dial-admin-backend #1218
ci: bump step-security/harden-runner from 2.22.2 to 2.22.3
xiaomizhoubaobei/astrbot-plugin-song-voice #6
ci: bump step-security/harden-runner from 2.22.2 to 2.22.3
xiaomizhoubaobei/astrbot_plugin_models_ai #117
Bump step-security/harden-runner from 2.22.2 to 2.22.3 in the github-actions group
chore(deps): bump step-security/harden-runner from 2.14.0 to 2.22.3
step-security/create-or-update-comment #49
chore(deps): bump the all group across 1 directory with 2 updates
tektoncd/cli #3410
build(deps): bump step-security/harden-runner from 2.22.1 to 2.22.3
ProTechPh/FreelanceXchain-frontend #213
chore(deps)(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 in the github-actions group
chore(deps): Bump step-security/harden-runner from 2.22.2 to 2.22.3
kexi/vibe #675
chore(deps)(deps): bump step-security/harden-runner from 2.22.1 to 2.22.3
ci(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 in the github-actions group
Jeffeek/Rivulet #768
build(deps): bump the github-actions group across 1 directory with 2 updates
Bump step-security/harden-runner from 2.22.2 to 2.22.3
onap/oparent #46
Bump step-security/harden-runner from 2.22.2 to 2.22.3
chore(deps): bump step-security/harden-runner from 2.22.1 to 2.22.3
HiDiHo01/home-assistant-frank_energie #361
⬆️ Bump the github-actions group with 11 updates
Nick2bad4u/tf2 #53
chore(deps): bump the actions group with 12 updates
yolo-labz/anthropic-throttle-proxy #394
chore(deps): bump the github-actions group across 1 directory with 5 updates
OpenAlly/configs #215
ci: bump step-security/harden-runner from 2.21.1 to 2.22.3
devinhorowitz/horowitz.law #369
chore(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 in the actions group
hyperpolymath/stateful-artefacts #80
chore(deps): bump the github-actions group with 8 updates
NodeSecure/js-x-ray #748
Bump the monthly-batch group with 13 updates
marcelotduarte/freeze-core #268
Bump step-security/harden-runner from 2.22.1 to 2.22.3
build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3
kroxylicious/kroxylicious #5255
chore(ci): bump the actions-minor-and-patch group across 1 directory with 9 updates
stephrobert/artefacts-dsoxlab-training #4
ci: bump step-security/harden-runner from 2.22.0 to 2.22.3
BrunoCerberus/Pulse #541
Bump step-security/harden-runner from 2.22.1 to 2.22.2 in the github-actions group
MicrosoftDocs/quantum-docs #703
Bump step-security/harden-runner from 2.21.1 to 2.22.2
1Password/for-open-source #1801
build(deps): bump step-security/harden-runner from 2.12.1 to 2.22.2
Bump step-security/harden-runner from 2.21.1 to 2.22.2
brandonrq506/brekitdown-api #189
chore(deps): bump the github-actions group across 1 directory with 3 updates
data-mermaid/mermaid-webapp #1814
CI(actions): Bump step-security/harden-runner from 2.22.1 to 2.22.2
lfreleng-actions/test-gradle-project #23
Chore: Bump step-security/harden-runner from 2.14.2 to 2.22.2
o-ran-sc/it-dep #52
chore(deps): bump the actions group with 6 updates
Bump the all-actions group with 4 updates
Doezer/Questarr #1247
chore(deps): bump step-security/harden-runner from 2.22.1 to 2.22.3
rudderlabs/rudder-transformer #5725
Bump step-security/harden-runner from 2.19.4 to 2.22.2
chainguard-dev/terraform-google-chainguard-account-association #53
👷 ci(deps): bump the github-actions-minor-patch group with 5 updates
morzecrew/forze #650
Bump step-security/harden-runner from 2.22.1 to 2.22.2
onap/dcaegen2 #51
ci: Bump the github-actions group with 7 updates
canact/canact #384
chore(deps): bump the actions-minor-and-patch group across 1 directory with 3 updates
Package Details
| Name: | step-security/harden-runner |
| Ecosystem: | actions |
| PURL Type: | githubactions |
| Package URL: | pkg:githubactions/step-security/harden-runner |
| JSON API: | View JSON |
Security Advisories
Package Information
Harden-Runner provides runtime security for GitHub-hosted and self-hosted runners
| Repository: | https://github.com/step-security/harden-runner |
| Homepage: | https://www.stepsecurity.io |
| Latest Release: |
v2.12.0
over 1 year ago |
| Dependent Repos: | 497 |
| Dependent Packages: | 0 |
| Ranking: | Top 1.556% by dependent repos Top 0.0% by dependent pkgs |