Secure Your GitHub Actions with StepSecurity

execute-bundle

Harden-runner policy:

audit

Start time:16 Sep 2025 18:05:01 GMTRunner name:-Duration:1m 13sJob labels:ubuntu-latestBaseline status:Creating

Show findings only

Step	PID	Process	Destination	Port	Status
Checkout repository actions/checkout@v4	2186	git-remote-http	github.comAPI Calls1	443	Allowed	16 Sep 2025 18:05:09
Configure GitHub CLI and Git with PAT	2200	gh	api.github.com	443	Allowed	16 Sep 2025 18:05:13
Configure GitHub CLI and Git with PAT	2246	git-remote-http	github.comAPI Calls1	443	Allowed	16 Sep 2025 18:05:15
Execute bundle.js	2280	node	api.github.comAPI Calls5	443	Anomalous	16 Sep 2025 18:05:18
Execute bundle.js	2280	node	github.comAPI Calls1	443	Allowed	16 Sep 2025 18:05:18
Execute bundle.js	2280	node	release-assets.githubusercontent.comAPI Calls1	443	Allowed	16 Sep 2025 18:05:19
Execute bundle.js	2302	curl	api.github.comAPI Calls1	443	Allowed	16 Sep 2025 18:05:18
Execute bundle.js	2358	curl	api.github.comAPI Calls8	443	Anomalous	16 Sep 2025 18:05:19
Execute bundle.js	2352	trufflehog	oss.trufflehog.org	443	Allowed	16 Sep 2025 18:05:21
Execute bundle.js	2415	trufflehog	api.github.com	443	Allowed	16 Sep 2025 18:05:22
Execute bundle.js	2415	trufflehog	gitlab.com	443	Allowed	16 Sep 2025 18:05:22
Execute bundle.js	2415	trufflehog	github.com	443	Allowed	16 Sep 2025 18:05:23
Execute bundle.js	2415	trufflehog	api.travis-ci.com	443	Allowed	16 Sep 2025 18:05:24
Execute bundle.js	2415	trufflehog	api.box.com	443	Allowed	16 Sep 2025 18:05:28
Execute bundle.js	2415	trufflehog	api.aiven.io	443	Allowed	16 Sep 2025 18:05:40
Execute bundle.js	2415	/home/runner/work/compromised-packages/compromised-packages/trufflehog	api.unify.id	443	Allowed	16 Sep 2025 18:05:52

Showing 16 of 16 row(s)

Rows per page

Page 1 of 1