Skip to content

Merge branch 'main' into 03084-fix-docs-broken-nlg-example-link

cd17830
Select commit
Loading
Failed to load commit list.
Merged

docs: fix broken link for network-load-generator example #3089

Merge branch 'main' into 03084-fix-docs-broken-nlg-example-link
cd17830
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Harden-Runner failed Jan 7, 2026 in 1h 16m 46s

⚠️ Unexpected network calls from CI/CD runners

Harden-Runner has generated new alerts for GitHub Actions workflow runs in this pull request. These findings may indicate malicious activities or misconfigurations, so prompt analysis is recommended.

Details

Harden-Runner monitors all outbound traffic from each job at the DNS and network layers to ensure that CI/CD runners do not communicate with unauthorized destinations.
This reduces the risk of CI/CD secrets and source code being exfiltrated.

Click here to approve this check run

The following anomalous outbound network calls were detected.

Endpoint Workflow Workflow Run Insights status
ix-denver.mm.fcix.net:443 flow-pull-request-checks.yaml Insights URL ⚠️ Anomalous

🔎 Potential next steps

Anomalous Network Call

To investigate and triage the detection, please follow the runbook at https://docs.stepsecurity.io/harden-runner/runbooks/anomalous-outbound-network-calls

📋 Monitored GitHub Actions workflow runs

The following GitHub Actions workflow runs were monitored as part of this pull request.

Workflow Run ID Unique Destinations Actions Used Detailed Insights
flow-pull-request-checks.yaml 20783127258 102 17 View Insights
flow-pull-request-formatting.yaml 20783127022 3 2 View Insights
flow-gcs-test.yaml 20783127143 36 11 View Insights
flow-performance-test.yaml 20783127184 38 10 View Insights
flow-migration-test.yaml 20783127130 28 7 View Insights
codeql 20783126482 - - Harden-Runner not enabled

📚 Learn More

You can learn more about this GitHub check here