Skip to main content

Disable Telemetry

Harden Runner sends telemetry related to egress traffic to the StepSecurity API e.g.

  • Domain names resolved,
  • IP addresses called, and
  • Processes that made these calls

This telemetry is used to render the insights page.

When you use egress-policy: block mode, and if you do not want this telemetry to be sent anymore, you can set disable-telemetry: true.

When this is done, telemetry is no longer sent to StepSecurity API.

Example​

Here is an example of how to use disable-telemetry: true

name: Harden Runner
uses: step-security/harden-runner@v2
with:
  egress-policy: block
  disable-telemetry: true
  allowed-endpoints: >
    api.github.com:443
    github.com:443