ci: harden runner

achrinza · achrinza · commit 7b9b20c60895 · 2023-08-30T19:53:38.000+08:00
see: loopbackio/security#26 Signed-off-by: Rifa Achrinza <25147899+achrinza@users.noreply.github.com>
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -12,6 +12,9 @@ jobs:
     runs-on: ubuntu-latest
     permissions: {}
     steps:
+      - uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # tag=v2.5.1
+        with:
+          egress-policy: audit
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
