[StepSecurity] ci: Harden GitHub Actions

step-security-bot · step-security-bot · commit c1a7c6bd829e · 2025-01-24T18:42:25.000Z
Signed-off-by: StepSecurity Bot &lt;bot@stepsecurity.io&gt;
diff --git a/.github/workflows/createNewCodeSandBoxDemo.yml b/.github/workflows/createNewCodeSandBoxDemo.yml
@@ -6,6 +6,11 @@ jobs:
   create-new-demo:
     runs-on: ubuntu-latest
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Setup Ruby in runner
         uses: ruby/setup-ruby@ee26e27437bde475b19a6bf8cb73c9fa658876a2
         with:
