A prime target for cyber threats, CI/CD has unparalleled access to source code, build artifacts, and cloud deployments. The rise in incidents, coupled with CI/CD security guidance from CISA and NSA, highlight the urgency for robust security controls.
Protect against SolarWinds and Codecov-style CI/CD attacks in self-hosted ARC environments with cutting-edge eBPF technology
Gain in-depth runtime security insights into all GitHub Actions workflow runs
Enable ARC Kubernetes cluster wide secure by default policies
Prevent Codecov style CI/CD security attacks by enabling auto-generated block policies on outbound traffic to ensure only allowed endpoints are accessible
Defend against SolarWinds style CI/CD security attacks by monitoring GitHub Actions workflow runs for tampering of source code files and build artifacts
Harden-Runner is a Must-Have GitHub Action to Prevent Supply Chain Attacks. StepSecurity is the one-stop-shop to harden your GitHub Actions and ensure peace of mind.
Harden-runner is an amazing project by StepSecurity! You can easily integrate it in your GitHub Actions and it will block egress traffic and ensure your code isn't overwritten at runtime, to protect against malicious or compromised dependencies.
I think this is a great idea and for the threat model of build-time, an immediate network egress request monitoring makes a lot of sense
Harden-Runner is a Must-Have GitHub Action to Prevent Supply Chain Attacks. StepSecurity is the one-stop-shop to harden your GitHub Actions and ensure peace of mind.
Harden-runner is an amazing project by StepSecurity! You can easily integrate it in your GitHub Actions and it will block egress traffic and ensure your code isn't overwritten at runtime, to protect against malicious or compromised dependencies.
It was super easy to setup Harden-Runner and diagnose the issues it uncovered. We found some gremlins slowing down our build and can now avoid new ones sneaking back in. Really great work.
I think this is a great idea and for the threat model of build-time, an immediate network egress request monitoring makes a lot of sense
Harden-Runner is a Must-Have GitHub Action to Prevent Supply Chain Attacks. StepSecurity is the one-stop-shop to harden your GitHub Actions and ensure peace of mind.
Harden-Runner strikes an elegant balance between ease-of-use, maintainability, and mitigation that I intend to apply to all of my 300+ npm packages. I look forward to the tool’s improvement over time
Harden-runner is an amazing project by StepSecurity! You can easily integrate it in your GitHub Actions and it will block egress traffic and ensure your code isn't overwritten at runtime, to protect against malicious or compromised dependencies.
It was super easy to setup Harden-Runner and diagnose the issues it uncovered. We found some gremlins slowing down our build and can now avoid new ones sneaking back in. Really great work.
I think this is a great idea and for the threat model of build-time, an immediate network egress request monitoring makes a lot of sense
.svg)
StepSecurity uses cookies to improve your experience and analyze traffic. By using our website, you agree to our privacy policy
Accept
