This GitHub Action deploys the Step Security Agent, which is a purpose-built security agent for hosted runners.
To pilot this GitHub Action, add the following code to your GitHub Actions workflow file as the first step. This is the only step needed.
steps:
- uses: step-security/harden-runner@main
In the workflow logs, you should see a link to security insights and recommendations.
It is being piloted on this repository. Check out the workflow files and workflow runs.