diff --git a/.github/workflows/build-and-quality-checks.yml b/.github/workflows/build-and-quality-checks.yml
index e251e6f..c00e1f5 100644
--- a/.github/workflows/build-and-quality-checks.yml
+++ b/.github/workflows/build-and-quality-checks.yml
@@ -10,6 +10,11 @@ jobs:
     runs-on: macOS-latest
     
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Checkout source branch
         uses: actions/checkout@v3
         
diff --git a/.github/workflows/check-pr-title.yml b/.github/workflows/check-pr-title.yml
index a18098c..5ce77ed 100644
--- a/.github/workflows/check-pr-title.yml
+++ b/.github/workflows/check-pr-title.yml
@@ -9,6 +9,11 @@ jobs:
     name: Check PR title
     runs-on: ubuntu-latest
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Checkout source branch
         uses: actions/checkout@v3
 
diff --git a/.github/workflows/deploy-cocoapods.yml b/.github/workflows/deploy-cocoapods.yml
index 6fc38ed..8e2a030 100644
--- a/.github/workflows/deploy-cocoapods.yml
+++ b/.github/workflows/deploy-cocoapods.yml
@@ -9,6 +9,11 @@ jobs:
     name: Deploy to Cocoapods
     runs-on: macOS-latest
     steps:
+    - name: Harden the runner (Audit all outbound calls)
+      uses: step-security/harden-runner@v2
+      with:
+        egress-policy: audit
+
     - name: Checkout source branch
       uses: actions/checkout@v3
     
diff --git a/.github/workflows/draft-new-release.yml b/.github/workflows/draft-new-release.yml
index 500ef35..328c164 100644
--- a/.github/workflows/draft-new-release.yml
+++ b/.github/workflows/draft-new-release.yml
@@ -9,6 +9,11 @@ jobs:
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/heads/fix/') || startsWith(github.ref, 'refs/heads/feat/')
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Checkout source branch
         uses: actions/checkout@v3
         with:
diff --git a/.github/workflows/manage-github-issue-for-outdated-pods.yml b/.github/workflows/manage-github-issue-for-outdated-pods.yml
index 12d7f14..37d182f 100644
--- a/.github/workflows/manage-github-issue-for-outdated-pods.yml
+++ b/.github/workflows/manage-github-issue-for-outdated-pods.yml
@@ -10,6 +10,11 @@ jobs:
     runs-on: macos-latest
     name: Check outdate pods and create issue if it doesn't exist
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - uses: actions/checkout@v3
 
       - name: Check outdated pods and create issue
diff --git a/.github/workflows/notion-pr-sync.yml b/.github/workflows/notion-pr-sync.yml
index 3d26296..df5117f 100644
--- a/.github/workflows/notion-pr-sync.yml
+++ b/.github/workflows/notion-pr-sync.yml
@@ -47,6 +47,11 @@ jobs:
   request:
     runs-on: ubuntu-latest
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Sync Github PRs to Notion
         uses: sivashanmukh/github-notion-pr-sync@1.0.0
         with:
diff --git a/.github/workflows/publish-new-release.yml b/.github/workflows/publish-new-release.yml
index 913590f..b66d450 100644
--- a/.github/workflows/publish-new-release.yml
+++ b/.github/workflows/publish-new-release.yml
@@ -13,6 +13,11 @@ jobs:
     runs-on: ubuntu-latest
     if: startsWith(github.event.pull_request.head.ref, 'release/') && github.event.pull_request.merged == true # only merged pull requests must trigger this job
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Extract version from branch name (for release branches)
         id: extract-version
         run: |
diff --git a/.github/workflows/slack-notify.yml b/.github/workflows/slack-notify.yml
index e50ef07..dbc8423 100644
--- a/.github/workflows/slack-notify.yml
+++ b/.github/workflows/slack-notify.yml
@@ -9,6 +9,11 @@ jobs:
     name: Notify Slack
     runs-on: ubuntu-latest
     steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+
       - name: Send message to Slack channel
         id: slack
         uses: slackapi/slack-github-action@v1.23.0