harden-runner: GitHub Action to prevent software supply chain attacks
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time. - step-security/harden-runner
harden-runner: GitHub Action to prevent software supply chain attacks launched on February 28, 2022 with 11 votes, #1,066 of 2,645 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 4 years on.
In plain words
harden-runner is a GitHub Action designed to prevent software supply chain attacks. It runs on GitHub and helps developers protect their build pipelines by monitoring and controlling what happens during the software build process. The tool is intended for teams using GitHub who want to add security layers to their CI/CD workflows to reduce the risk of unauthorized access or malicious code injection during development and deployment.
written from the facts on this page · September 2026
Does a similar job
all alternatives →
Protect Your CI/CD from SolarWinds-Type Attacks with This Agent2023 · github.com · ▲15Hello HN, my name is Varun, and I am the co-founder of StepSecurity. Here is the backstory about Harden-Runner. We thoroughly researched past software supply chain security incidents. The devastating breaches of SolarWinds, Codecov, and others, have one thing in common – they attacked the CI/ CD pipeline or the build server. These incidents made it clear that a purpose-built security agent was needed for CI/ CD. While there are numerous agents available for desktops and servers, such as from CrowdStrike and Lacework, none have been tailored specifically to address the unique risks…
BuildJet for GitHub Actions2021 · buildjet.com · ▲82Managed high-performance runners for Github Actions
Bitrise Build Hub28d ago · bitrise.io · ▲176GitHub Actions runners that build 2x faster for your agents
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 20d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 29d ago · world.pixverse.video
Source: Show HN post ↗
Launched alongside, February 2022
the whole month →
Sha256 algorithm explained online step by step visually
Life & fun · 2022 · sha256algorithm.com
EdgeDB 1.0▲947Today, after years of research, development, and refinement EdgeDB graduates to a production-ready database. We are very proud to announce EdgeDB 1.0.
Dev tools · 2022 · edgedb.com
