Socket Firewall

Author: gui-ying233

.github/workflows/Build.yaml

@@ -15,6 +15,10 @@ jobs:
               uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # main
               with:
                   egress-policy: audit
+            - name: 准备 Socket Firewall
+              uses: socketdev/action@ba6de6cc0565af1f42295590380973573297e31f # main
+              with:
+                  mode: firewall
             - name: 签出
               uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # main
               with:
@@ -32,7 +36,7 @@ jobs:
                   cache: pnpm
                   check-latest: true
             - name: 安装 pnpm 依赖
-              run: pnpm install
+              run: sfw pnpm install
             - name: 构建
               run: |
                   pnpm run build