cyber.hendryadrian.com
Security News · stepsecurity.io

StepSecurity Adds Bitrise macOS Runner Support to Harden-Runner

· Original article ↗

Summary

Harden-Runner v2.20.0 adds support for Bitrise Build Hub macOS runners, joining other third-party GitHub Actions providers. StepSecurity says the tool provides outbound network monitoring, workflow-step event correlation and detections.

Key points

  • Harden-Runner v2.20.0 adds support for Bitrise Build Hub macOS runners, alongside Blacksmith, Depot, Namespace and Warp.
  • The article says integration uses Harden-Runner as the first job step, with the runner provider set through the workflow’s runs-on value.
  • StepSecurity describes outbound network monitoring, correlation of events to workflow steps and detections in its dashboard.
  • For Blacksmith, Depot, Namespace and Warp, the article lists audit mode, block mode with allowed endpoints, Policy Store integration and security insights in job logs and the dashboard.
  • The article highlights that iOS build runners may hold Apple signing certificates, provisioning profiles and App Store Connect API keys.

Article Details

Event Type
Runtime-security support expansion for third-party GitHub Actions runners
Impact
Harden-Runner v2.20.0 adds support for Bitrise Build Hub macOS runners, extending its runtime monitoring to Bitrise alongside Blacksmith, Depot, Namespace, and Warp. The article says it provides outbound network monitoring, workflow-step event correlation, and detections, helping protect build credentials and signing materials from risks posed by compromised dependencies or poisoned actions. No new compromise or customer impact is reported.

Malware

Shai-Hulud 2Supply chain attacks do not check your runs-on label. When the Sha1-Hulud worm compromised prominent npm packages, the malicious code executed wherever npm install ran. When the Velora DEX SDK compromise dropped a macOS

Vendors

BitriseActions runner providers with the same one-step integration used on GitHub-hosted runners. With v2.20.0, Bitrise Build Hub macOS runners join the supported list alongside Blacksmith, Depot, Namespace, and Warp Build.BlacksmithGitHub-hosted runners. With v2.20.0, Bitrise Build Hub macOS runners join the supported list alongside Blacksmith, Depot, Namespace, and Warp Build.Depotrunners. With v2.20.0, Bitrise Build Hub macOS runners join the supported list alongside Blacksmith, Depot, Namespace, and Warp Build.NamespaceWith v2.20.0, Bitrise Build Hub macOS runners join the supported list alongside Blacksmith, Depot, Namespace, and Warp Build.StepSecurityHarden-Runner gives these runners the same protection as GitHub-hosted ones: outbound network monitoring, correlation of events to the exact workflow step, and detections in the StepSecurity dashboard.WarpBitrise Build Hub macOS runners join the supported list alongside Blacksmith, Depot, Namespace, and Warp Build.

Products

Bitrise Build Hubrunner providers with the same one-step integration used on GitHub-hosted runners. With v2.20.0, Bitrise Build Hub macOS runners join the supported list alongside Blacksmith, Depot, Namespace, and Warp Build.GitHub ActionsMore teams than ever are running GitHub Actions jobs on third-party runner providers: faster hardware, better price-performance, Apple silicon for mobile builds, or region-specific infrastructure. What those teamsHarden-RunnerHarden-Runner supports third-party GitHub Actions runner providers with the same one-step integration used on GitHub-hosted runners. With v2.20.0, Bitrise Build Hub macOS runners join the supported list alongside

Related Articles