Harden Runner GitHub Action
A CI/CD security agent that monitors GitHub Actions runners for threats like network egress, file integrity, and process activity.
What is Harden Runner GitHub Action?
Harden-Runner is a CI/CD security agent that functions like an Endpoint Detection and Response (EDR) system for GitHub Actions runners. It monitors network egress, file integrity, and process activity on these runners in real-time to detect and prevent supply chain attacks. It addresses the security gap where CI/CD runners, which handle sensitive secrets and create production builds, often lack the robust monitoring found on other critical systems.
Development and security teams using GitHub Actions for CI/CD, particularly those managing open-source projects, enterprises with private repositories, or organizations with strict compliance requirements for their software supply chain.
Developers choose Harden-Runner because it provides CI/CD-aware security monitoring tailored for the ephemeral nature of runners, offering real-time threat detection, automated baselining, and actionable insights that traditional EDR tools lack. Its ability to correlate events directly to workflow steps and its support for both GitHub-hosted and self-hosted runners make it a unique, context-rich security solution.
Overview
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
