step-security/harden-runner
actions
pkg:githubactions/step-security/harden-runner
8,284 Dependabot PRs
10 days ago
2,657 repositories
15 repositories
Security Advisories
Harden-Runner allows evasion of 'disable-sudo' policy
Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)
Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)
Harden-Runner: Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)
Harden-Runner has a command injection weaknesses in `setup.ts` and `arc-runner.ts`
Recent PRs (filtered by: Patch PRs )
Bump step-security/harden-runner from 2.19.3 to 2.19.4
chore(deps): bump the all group with 5 updates
tektoncd/cli #3002
chore(deps): bump the all group with 5 updates
tektoncd/cli #2995
chore(deps): bump the github-actions group across 1 directory with 7 updates
chore(deps)(deps): bump the github-actions-minor group across 1 directory with 14 updates
Bump the dependencies group across 1 directory with 15 updates
oyakh1/hiero-mirror-node--017 #32
Bump the dependencies group across 1 directory with 15 updates
oyakh1/hiero-mirror-node--029 #33
Bump the dependencies group across 1 directory with 11 updates
oyakh1/hiero-mirror-node--039 #30
Bump the dependencies group across 1 directory with 11 updates
oyakh1/hiero-mirror-node--033 #31
Bump the github-actions group across 1 directory with 5 updates
Bump the dependencies group across 1 directory with 11 updates
oyakhilo20/hiero-mirror-node--020 #31
Bump the dependencies group across 1 directory with 11 updates
oyakhilo20/hiero-mirror-node--040 #31
chore(deps): bump the actions group with 4 updates
vex-protocol/vex-protocol #233
Bump the action-packages group across 1 directory with 4 updates
fiaisis/fia-auth #213
chore(deps): bump the github-actions group with 2 updates
NodeSecure/report #513
deps: Bump the actions group with 3 updates
build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.4
utilitywarehouse/vault-kube-cloud-credentials #414
chore(ci)(deps): bump step-security/harden-runner from 2.19.1 to 2.19.4
dytsou/intern-corner-scheduler #103
deps: Bump the actions group with 7 updates
Bump the dependencies group across 1 directory with 10 updates
oyakh1/hiero-mirror-node--006 #27
chore(deps): bump the github-actions group across 1 directory with 15 updates
actions-marketplace-validations/afadesigns_zshellcheck #3
chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4
eclipse-tractusx/tractusx-edc #2848
Bump the actions-updates group across 1 directory with 3 updates
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.4
hiero-ledger/hiero-website #469
chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4
BcryptNet/bcrypt.net #293
deps(deps): Bump the actions group across 1 directory with 9 updates
chore(deps): bump the github-actions group across 1 directory with 12 updates
afadesigns/zshellcheck #1335
chore(deps): bump the github-actions-deps group across 1 directory with 3 updates
rudderlabs/rudder-sdk-node #424
Bump the actions-updates group across 1 directory with 2 updates
Bump step-security/harden-runner from 2.19.3 to 2.19.4
Bump the production-dependencies group across 1 directory with 5 updates
Contrast-Security-OSS/contrast-documentation-rss #22
deps: bump step-security/harden-runner from 2.19.3 to 2.19.4
deps(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4
markdown-confluence/markdown-confluence #737
Bump the dependencies group across 1 directory with 9 updates
oyakh1/hiero-mirror-node--034 #23
📦 deps: bump the actions-minor group with 7 updates
build(deps): bump the all group with 3 updates
kubernetes-sigs/cloud-provider-azure #10439
Chore: bump step-security/harden-runner from 2.19.2 to 2.19.4
chore(deps)(deps): bump step-security/harden-runner from 2.19.1 to 2.19.4
janitor-security/the-janitor #154
build(deps): Bump step-security/harden-runner from 2.19.1 to 2.19.4
devops-actions/github-copilot-pr-analysis #136
Bump step-security/harden-runner from 2.19.1 to 2.19.4
Chore(deps): Bump step-security/harden-runner from 2.19.2 to 2.19.4
chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4
yolo-labz/claude-classroom-submit #26
Bump step-security/harden-runner from 2.19.1 to 2.19.4
JSPaste/Library #91
Bump step-security/harden-runner from 2.19.1 to 2.19.4
:seedling: Bump the github-actions group with 2 updates
open-cluster-management-io/ocm #1542
:seedling: Bump the github-actions group across 1 directory with 6 updates
ossf/scorecard #5071
Bump the dependencies group across 1 directory with 9 updates
oyakh1/hiero-mirror-node--047 #23
chore(deps): Bump the github-actions group with 2 updates
nullvariant/nullvariant-vscode-extensions #517
chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4
kaelys-js/heron #113
ci: bump the github-actions-minor-patch group with 4 updates
sebastienrousseau/dotfiles #906
Package Details
| Name: | step-security/harden-runner |
| Ecosystem: | actions |
| PURL Type: | githubactions |
| Package URL: | pkg:githubactions/step-security/harden-runner |
| JSON API: | View JSON |
Security Advisories
Package Information
Harden-Runner provides runtime security for GitHub-hosted and self-hosted runners
| Repository: | https://github.com/step-security/harden-runner |
| Homepage: | https://www.stepsecurity.io |
| Latest Release: |
v2.12.0
over 1 year ago |
| Dependent Repos: | 497 |
| Dependent Packages: | 0 |
| Ranking: | Top 1.556% by dependent repos Top 0.0% by dependent pkgs |