diff --git a/.github/workflows/request-triage-review.yml b/.github/workflows/request-triage-review.yml
index 7a36c79ec..ad056a738 100644
--- a/.github/workflows/request-triage-review.yml
+++ b/.github/workflows/request-triage-review.yml
@@ -18,8 +18,13 @@ jobs:
     runs-on: [self-hosted,hl-sdk-py-lin-md]
 
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
+        with:
+          egress-policy: audit
+
       - name: Request triage review
-        uses: actions/github-script@v9.0.0 #v9.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const tag = "<!-- triage -->";