From 335a07fd38928cf4aa99ce0d6653cfb6daa52e3c Mon Sep 17 00:00:00 2001
From: Varun Sharma <varunsh@stepsecurity.io>
Date: Fri, 10 Dec 2021 12:28:57 -0800
Subject: [PATCH] Update README.md

---
 README.md | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 2b9345f..9e1b658 100644
--- a/README.md
+++ b/README.md
@@ -11,8 +11,9 @@ First-of-its-kind patent-pending technology that automatically discovers and cor
 ```
 steps:
   - uses: step-security/harden-runner@v1
-    with:
-      egress-policy: audit
+      with:
+        egress-policy: audit
+  - uses: actions/checkout@v2
 ```
 
 2. In the workflow logs, you will see a link to security insights and recommendations.  
@@ -31,3 +32,14 @@ steps:
 </p>
 
 4. Add the recommended outbound endpoints to your workflow file, and only traffic to these endpoints will be allowed.
+
+```
+steps:
+      - uses: step-security/harden-runner@v1
+        with:
+          allowed-endpoints:
+            github.com:443
+            nodejs.org:443
+            registry.npmjs.org:443
+      - uses: actions/checkout@v2
+```
\ No newline at end of file