Secure your GitHub Actions with StepSecurity

Attempt 1

Direct payload execution (3.0.4)

Harden-runner policy:

audit

Start time:28 Aug 2026 20:49:55 GMTRunner name:-Duration:1m 19sJob labels:ubuntu-latest

Show:

Show all steps

Step	PID	Process	Destination	Port	Status
Acquire package without lifecycle execution	2311	env	registry.npmjs.orgAPI Calls132	443	AllowedNot in baseline - learning	28 Aug 2026 20:50:03
Execute payload with CI markers stripped	2337	curl	github.comAPI Calls1	443	AllowedNot in baseline - learning	28 Aug 2026 20:50:07
Execute payload with CI markers stripped	2337	curl	release-assets.githubusercontent.comAPI Calls1	443	AllowedNot in baseline - learning	28 Aug 2026 20:50:07
Execute payload with CI markers stripped	2357	bun	api.github.com	443	AllowedNot in baseline - learning	28 Aug 2026 20:50:12