step-security/agent

Sealed execution environment for GitHub Actions.

A fence keeps things out, but also in. This project is still in early, and active development.

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

Runtime Security Solution for your CI/CD Pipeline

GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

Safely run your agents using any coding harness

Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows

🐦‍⬛ Security scanner for GitHub Actions pipelines

agent runtime security - zero trust, zero setup, zero latency agent sandboxing