step-security/harden-runner

harden-runner

✅ Recently maintained

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

1,295Stars
123Forks
+47-day stars

TypeScript · Apache-2.0 · Last push 2026-10-27

Official repository & installation ↗
github-actionsactionssupply-chain-securityhardeningsecurity-hardeningrunnersegress-filteringnetwork-securityruntime-security

GitValue · Value evidence

Unscored · Evidence coverage 0%

Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.

Star history

2025-09-292026-11-03
View historical data
DateStars
2026-10-041,277
2026-10-051,277
2026-10-061,278
2026-10-071,278
2026-10-081,278
2026-10-091,278
2026-10-101,278
2026-10-111,278
2026-10-121,278
2026-10-131,278
2026-10-141,280
2026-10-151,281
2026-10-161,281
2026-10-171,283
2026-10-181,285
2026-10-191,285
2026-10-201,288
2026-10-211,288
2026-10-221,289
2026-10-231,289
2026-10-241,289
2026-10-251,289
2026-10-261,290
2026-10-271,292
2026-10-281,293
2026-10-291,293
2026-10-301,293
2026-10-311,294
2026-11-011,295
2026-11-031,295

Get the project

git clone https://github.com/step-security/harden-runner.git

Cloning downloads the source. For dependencies and installation, follow the project README.

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.

orca

A workbench for running and orchestrating fleets of coding agents across desktop, mobile, and remote runtimes.

★ 113,849ragflow

Agent-native RAG engine with deep document parsing and knowledge compilation, serving as context infrastructure for AI applications.

★ 93,397worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness in

★ 90,039