{"adoption": {"forks": 111, "observed_at": "2026-08-28T04:04:09.518769+00:00", "stars": 1258}, "canonical_url": "https://ross.abutalabs.com/products/harden-runner", "card": {"archived": false, "artifact_type": "service", "description": "Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.", "domain": ["security", "developer-tools"], "enriched": true, "function": ["security", "monitoring", "ci-cd", "alerting", "tracing"], "health_score": 99, "homepage": "https://www.stepsecurity.io", "language": "TypeScript", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["step-security/harden-runner"], "name": "step-security/harden-runner", "platform": ["windows", "cloud", "self-hosted"], "pushed_at": "2026-08-15T06:05:32+00:00", "repo": "step-security/harden-runner", "stars": 1258, "tags": ["github-actions", "supply-chain-security", "edr", "egress-filtering", "ebpf", "runtime-security", "ci-cd-security", "hardening", "devops", "automation", "linux", "macos", "docker"], "topics": ["github-actions", "actions", "supply-chain-security", "hardening", "security-hardening", "runners", "egress-filtering", "network-security", "runtime-security"], "urls": [], "use_cases": ["detect compromised npm packages in CI builds", "monitor network egress from GitHub Actions runners", "prevent secrets exfiltration during CI/CD pipelines", "harden GitHub Actions workflows against supply chain attacks", "get alerts when a build step downloads from unexpected domains", "audit file and process activity on CI runners", "comply with software supply chain security requirements"], "what_it_is": "Harden-Runner is a CI/CD security agent that acts like an EDR for GitHub Actions runners, monitoring network egress, file integrity, and process activity in real time. It detects compromised dependencies and malicious workflow behavior, and has caught several real-world supply chain attacks such as the tj-actions/changed-files and axios npm compromises.", "when_to_avoid": ["you need security monitoring for developer laptops or production servers rather than CI runners", "you use CI systems other than GitHub Actions without the enterprise plan", "you only need static dependency scanning rather than runtime detection"], "when_to_choose": ["you run builds on GitHub Actions and want runtime security monitoring", "you need to detect malicious dependencies or exfiltration attempts in CI", "you want an EDR-like agent tailored to ephemeral CI/CD runners", "you need egress filtering and file integrity monitoring for build pipelines"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/harden-runner", "repo": "step-security/harden-runner", "role": "main", "score": 98}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:09.518769+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T05:05:37.159066+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1017afc5174713b532c8ebdeaa44ed63469ae02648e318d5716f8f5cc5d04739", "fetched_at": "2026-08-28T04:04:09.518769+00:00", "kind": "readme", "missing": false, "url": "https://github.com/step-security/harden-runner"}, {"content_hash": "0a0874ddb60a1d914fbb1cb808deb9039d74a0910817c9a34b6fdb1019e99834", "fetched_at": "2026-08-29T12:17:21.758777+00:00", "kind": "homepage", "missing": false, "url": "https://www.stepsecurity.io"}, {"content_hash": "a138bdcbe557c13ff9a425819642d7ec353c9924b23547783697c4977437b27e", "fetched_at": "2026-08-29T12:17:21.771140+00:00", "kind": "site_page", "missing": false, "url": "https://docs.stepsecurity.io/"}, {"content_hash": "c862f2ab5ddfe494fb01516e3467b6b3bdeaac9f762c09e4d57774336c47bd67", "fetched_at": "2026-08-29T12:17:21.768536+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/pricing"}, {"content_hash": "04ef9d864fd7c555c6945866e7fea87627c9ea73359969967e5249a3a0778774", "fetched_at": "2026-08-29T12:17:21.773240+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/company"}, {"content_hash": "6978d7225bb98288f91a8aadcd0c63f1d494dd911a9edc350429db311a0ace97", "fetched_at": "2026-08-29T12:17:21.775283+00:00", "kind": "site_page", "missing": false, "url": "https://www.stepsecurity.io/blog"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 97, "longevity": 100, "rhythm": 98}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1770, "days_push": 18, "days_rel": 18, "gap_med": 15.0, "n_releases_24m": 31}, "score": 98, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}