Policy Store

The policy store holds a collection of customized policies for your workflows, allowing you to easily manage and update policies in a single location.

Steps To Create and Use a Policy

Step 1: Navigate to the Policy Store

• Open StepSecurity, then navigate to the Harden Runner section and click on Policy Store

StepSecurity Policy Store page

Step 2: Click "Create policy"

StepSecurity Policy Store page

Step 3: Create a New Policy

• Enter a policy name.

• Configure the policy settings (e.g., allowed endpoints, telemetry settings).

• Click Add Policy to save.

StepSecurity Policy Store page

Step 4: Apply the Policy in Your Workflow

• Remove any existing manual policy configurations.

• Add the policy name under Harden Runner, for example:

  name: Harden Runner
    uses: step-security/harden-runner@<version>
    with:
      policy: Test-policy

• Click Commit Changes.

GitHub Workflow file

Step 5: Verify the Integration

• Run a test workflow to ensure the policy is applied correctly.