Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
active 2025-04-02 → 2025-11-19 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 232 days from 2025-04-02 to 2025-11-19. Pushes: 13 total, peak 2 in a day. Pull requests: 42 total, peak 6 in a day. Issues: 0 total, peak 0 in a day. Comments: 16 total, peak 4 in a day. Stars: 0 total, peak 0 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| dependabot[bot] | 40 | 3 | 26 | 11 |
| pull[bot] | 21 | 5 | 16 | 0 |
| semanticdiff-com[bot] | 5 | 0 | 0 | 5 |
| step-security-bot | 5 | 0 | 0 | 0 |
| pre-commit-ci[bot] | 5 | 5 | 0 | 0 |
Recent activity
Latest issues, pull requests and releases
- Pull request#54dependabot[bot]2025-11-19 08:20
- Issue comment#46dependabot[bot]2025-09-10 07:13Bump step-security/harden-runner from 2.9.1 to 2.13.0
- Pull request#52pull[bot]2025-09-09 18:13
- Pull request#52pull[bot]2025-09-09 18:13
- Issue comment#50dependabot[bot]2025-09-05 07:11Bump codecov/codecov-action from 3.1.4 to 5.5.0
- Issue comment#51dependabot[bot]2025-09-03 20:20Bump actions/dependency-review-action from 4.3.2 to 4.7.2
- Issue comment#51semanticdiff-com[bot]2025-08-21 06:36Bump actions/dependency-review-action from 4.3.2 to 4.7.2
- Issue comment#50semanticdiff-com[bot]2025-08-21 06:36Bump codecov/codecov-action from 3.1.4 to 5.5.0
- Issue comment#49semanticdiff-com[bot]2025-08-16 07:11Bump actions/checkout from 3 to 5
- Issue comment#43dependabot[bot]2025-08-16 07:11Bump actions/checkout from 3 to 4
- Pull request#43dependabot[bot]2025-08-16 07:11
- Pull request#49dependabot[bot]2025-08-16 07:11
- Issue comment#48semanticdiff-com[bot]2025-08-06 06:46Bump github/codeql-action from 3.25.13 to 3.29.5
- Issue comment#44dependabot[bot]2025-08-06 06:46Bump github/codeql-action from 3.25.13 to 3.29.2
- Pull request#44dependabot[bot]2025-08-06 06:46
- Issue comment#47semanticdiff-com[bot]2025-08-06 06:46Bump step-security/publish-unit-test-result-action from 2.20.0 to 2.20.2
- Issue comment#36dependabot[bot]2025-08-06 06:46Bump step-security/publish-unit-test-result-action from 2.20.0 to 2.20.1
- Pull request#36dependabot[bot]2025-08-06 06:46
- Pull request#47dependabot[bot]2025-08-06 06:46
- Pull request#45pull[bot]2025-07-16 00:13
- Issue comment#38dependabot[bot]2025-07-01 09:22Bump github/codeql-action from 3.25.13 to 3.29.1
- Pull request#38dependabot[bot]2025-07-01 09:22
- Pull request#44dependabot[bot]2025-07-01 09:22
- Pull request#42dependabot[bot]2025-06-30 09:50
- Pull request#40dependabot[bot]2025-06-30 09:47
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 0 stars here means stars gained during the window, not the repo's star count.