[actions] add step security runner

2021-11-22 07:20:50 -08:00
parent 81fc05684d
commit 6cc90a4b8d
7 changed files with 78 additions and 0 deletions
--- a/.github/workflows/rebase.yml
+++ b/.github/workflows/rebase.yml
@@ -11,6 +11,12 @@ jobs:
    runs-on: ubuntu-latest

    steps:
+    - name: Harden Runner
+      uses: step-security/harden-runner@v1
+      with:
+        allowed-endpoints:
+          api.github.com:443
+          github.com:443
    - uses: actions/checkout@v2
    - uses: ljharb/rebase@master
      env: