From 86c63774d62fe568fb47a31a89ccf99d4e696e88 Mon Sep 17 00:00:00 2001 From: "stepsecurity-app[bot]" <188008098+stepsecurity-app[bot]@users.noreply.github.com> Date: Fri, 24 Apr 2026 10:18:59 +0000 Subject: [PATCH] [StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot --- .github/workflows/request-triage-review.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/request-triage-review.yml b/.github/workflows/request-triage-review.yml index 7a36c79ec..ad056a738 100644 --- a/.github/workflows/request-triage-review.yml +++ b/.github/workflows/request-triage-review.yml @@ -18,8 +18,13 @@ jobs: runs-on: [self-hosted,hl-sdk-py-lin-md] steps: + - name: Harden the runner (Audit all outbound calls) + uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0 + with: + egress-policy: audit + - name: Request triage review - uses: actions/github-script@v9.0.0 #v9.0.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | const tag = "";