CI: Add harden runner to clang-format

sandialabs · Oct 16, 2024 · 19db1ff · 19db1ff
1 parent 915851b
commit 19db1ff
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/clang-format.yml b/.github/workflows/clang-format.yml
@@ -29,6 +29,11 @@ jobs:
     permissions:
         contents: write # In order to allow EndBug/add-and-commit to commit changes
     steps:
+    - name: Harden Runner
+      uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
+      with:
+        egress-policy: audit
+
     - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
 
     - name: Fix C++ and C formatting issues detected by clang-format