Harden-Runner Block Mode Now Available for macOS and Windows GitHub-Hosted Runners

Harden-Runner v2.20.0 now extends egress block mode to macOS and Windows GitHub-hosted runners, enabling organizations to prevent secret exfiltration across all operating systems used in CI/CD pipelines. This update addresses critical attack vectors seen in campaigns like Megalodon and GhostAction, where compromised workflows or dependencies exfiltrated secrets via outbound calls. Previously limited to audit mode on non-Linux runners, teams can now enforce network policies to block unauthorized egress traffic, strengthening supply chain security.

AI-extracted · verify before operational use