[StepSecurity] ci: Harden GitHub Actions (#4119)

Signed-off-by: StepSecurity Bot <[email protected]> Co-authored-by: Alan Jowett <[email protected]>
microsoft · Jan 10, 2025 · d3fd440 · d3fd440
1 parent 1cc9131
commit d3fd440
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/check_wdk.yml b/.github/workflows/check_wdk.yml
@@ -20,6 +20,11 @@ jobs:
   check:
     runs-on: Windows-latest
     steps:
+    - name: Harden Runner
+      uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+      with:
+        egress-policy: audit
+
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
     - name: Check for updates to the Windows Driver Kit