step-security/harden-runner
1
0
Fork 0
mirror of synced 2026-06-05 17:58:19 +00:00
Code Issues Projects Releases Packages Wiki Activity
harden-runner/docs/how-it-works.md
eromosele-stepsecurity c9c5f3273c Handle Ashish reviews
2025-01-14 20:15:06 +01:00

1.1 KiB
Raw Blame History

How Harden-Runner Works?

GitHub-Hosted Runners

For GitHub-hosted runners, Harden-Runner GitHub Action downloads and installs the StepSecurity Agent.

  • The code to monitor file, process, and network activity is in the Agent.
  • The agent is written in Go and can be found here
  • The agent's build is reproducible. You can view the steps to reproduce the build here

Self-Hosted Actions Runner Controller (ARC) Runners

  • ARC Harden Runner daemonset uses eBPF
  • You can find more details in this blog post
  • ARC Harden Runner is NOT open source.

Self-Hosted VM Runners (e.g. on EC2)

  • For self-hosted VMs, you add the Harden-Runner agent into your runner image (e.g. AMI).
  • You can find more details in this blog post
  • Agent for self-hosted VMs is NOT open source.