Merge branch 'main' into renovate/all-minor-patch

coveo · Feb 11, 2025 · 66f671a · 66f671a
2 parents 1ca1e9a + 2745eab
commit 66f671a
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/coveo-stew.yml b/.github/workflows/coveo-stew.yml
@@ -29,6 +29,11 @@ jobs:
         os: [ubuntu-latest, windows-latest, macos-latest]
 
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Checkout repository
         uses: actions/checkout@v4
 
@@ -67,6 +72,11 @@ jobs:
   test-action:
     runs-on: ubuntu-latest
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - uses: coveo/stew@main
         with:
           python-version: "3.10"