diff --git a/README.md b/README.md index b9021f2..effaec8 100644 --- a/README.md +++ b/README.md @@ -140,6 +140,20 @@ Once allowed endpoints are set in the policy in the workflow file, or in the [Po Policy recommended by harden-runner

+### 🤖 Select GitHub Actions with Confidence + +> Applies to both GitHub-hosted and self-hosted runners + +Before integrating a GitHub Action into your workflow, evaluate its network activity. + +- Access network behavior data for hundreds of GitHub Actions, compiled from thousands of workflow runs that use Harden-Runner in public repositories +- Search for a GitHub Action and view a comprehensive report of its outbound network traffic +- Use this insight to make educated choices about incorporating GitHub Actions into your projects + +

+ Networking behavior of an Action +

+ ### 📁 Detect tampering of source code during build > Applies to both GitHub-hosted and self-hosted runners diff --git a/images/network-behavior.png b/images/network-behavior.png new file mode 100644 index 0000000..04da1b4 Binary files /dev/null and b/images/network-behavior.png differ