> For the complete documentation index, see [llms.txt](https://docs.stepsecurity.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.stepsecurity.io/resources/whos-using-harden-runner.md). # Who's Using Harden-Runner? [Harden-Runner](/github-actions/harden-runner.md) provides network and runtime security for CI/CD pipelines, helping developers secure their GitHub Actions workflows against **supply chain attacks**. This showcase highlights 40 leading **open-source** projects that have integrated Harden-Runner to monitor outbound network calls, detect anomalies, and enforce security controls in their workflows. These projects are part of a larger ecosystem of **10,000+** open-source repositories and enterprises, including industry giants like Microsoft, Google, Kubernetes, and more, that trust Harden-Runner for CI/CD security. 🔍 See Harden-Runner in action—these insights are publicly available for open-source projects using the community tier. 🔒 Want to secure your own GitHub Actions workflows? [Add Harden-Runner](/workspace/getting-started.md#step-1-add-harden-runner-to-your-workflow) to your project today! ### :point\_down:Click on a project logo below to explore the security insights Harden-Runner has generated for it.


Microsoft	https://app.stepsecurity.io/github/microsoft/ebpf-for-windows/actions/runs/17232086797	Untitled design (3).png
Google	https://app.stepsecurity.io/github/google/libphonenumber/actions/runs/13609545923	Untitled design (4).png
CISA (CyberSecurity & Infrastructure Security Agency)	https://app.stepsecurity.io/github/cisagov/skeleton-action-composite/actions/runs/13800329753	Untitled design (2).png
Kubernetes	https://app.stepsecurity.io/github/kubernetes/release/actions/runs/13758123530	Untitled design (5).png
Intel	https://app.stepsecurity.io/github/intel/pcm/actions/runs/13679263543	Untitled design (7).png
NodeJS	https://app.stepsecurity.io/github/nodejs/api-docs-tooling/actions/runs/13730862672	Untitled design (8).png
AWS	https://app.stepsecurity.io/github/aws-ia/terraform-aws-eks-blueprints/actions/runs/13779813254	Untitled design (9).png
Azure	https://app.stepsecurity.io/github/Azure/azure-workload-identity/actions/runs/13800575125	Untitled design (10).png
Datadog	https://app.stepsecurity.io/github/DataDog/KubeHound/actions/runs/13793449897	Untitled design (11).png
Adobe	https://app.stepsecurity.io/github/adobe/S3Mock/actions/runs/13774250027	Untitled design (12).png
Block	https://app.stepsecurity.io/github/block/elasticgraph/actions/runs/13800048598	Untitled design (13).png
IBM	https://app.stepsecurity.io/github/ibm-granite/granite-io/actions/runs/13691255940	Untitled design (14).png
Samsung	https://app.stepsecurity.io/github/Samsung/CredSweeper/actions/runs/13719099833	Untitled design (15).png
Ruby	https://app.stepsecurity.io/github/ruby/rdoc/actions/runs/13177988466	Untitled design (16).png
Boeing	https://app.stepsecurity.io/github/Boeing/config-file-validator/actions/runs/13641569540	Untitled design (17).png
Citi	https://app.stepsecurity.io/github/Citi/parfun/actions/runs/13618260868	Untitled design (18).png
New Relic	https://app.stepsecurity.io/github/newrelic/newrelic-dotnet-agent/actions/runs/13767355530	Untitled design (19).png
Canonical	https://app.stepsecurity.io/github/canonical/canonical-kubernetes-release-ci/actions/runs/13742968851	Untitled design (20).png
Phillips	https://app.stepsecurity.io/github/philips-software/amp-devcontainer/actions/runs/13744065937	Untitled design (21).png
Backstage	https://app.stepsecurity.io/github/backstage/backstage/actions/runs/13795819306	Untitled design (22).png
Bazel	https://app.stepsecurity.io/github/bazelbuild/bazel/actions/runs/13795688417	Untitled design (23).png
Apache	https://app.stepsecurity.io/github/apache/ofbiz-framework/actions/runs/13790568577	Untitled design (24).png
Open Policy Agent	https://app.stepsecurity.io/github/open-policy-agent/gatekeeper/actions/runs/13693011718	Untitled design (25).png
AMP Project	https://app.stepsecurity.io/github/ampproject/amphtml/actions/runs/13756960829	Untitled design (26).png
DotNet	https://app.stepsecurity.io/github/dotnet/docs/actions/runs/13748129396	Untitled design (27).png
Office Dev	https://app.stepsecurity.io/github/OfficeDev/Office-Inspectors-for-Fiddler/actions/runs/13730057892	Untitled design (28).png
OpenThread	https://app.stepsecurity.io/github/openthread/openthread/actions/runs/13792110616	Untitled design (29).png
Carbon Language	https://app.stepsecurity.io/github/carbon-language/carbon-lang/actions/runs/13800450712	Untitled design (30).png
TektonCD	https://app.stepsecurity.io/github/tektoncd/pipeline/actions/runs/13797622069	Untitled design (31).png
Coder	https://app.stepsecurity.io/github/coder/coder/actions/runs/13731610418	Untitled design (32).png
OSSF	https://app.stepsecurity.io/github/ossf/scorecard/actions/runs/13760385581	Untitled design (33).png
NVM	https://app.stepsecurity.io/github/nvm-sh/nvm/actions/runs/13797797542	Untitled design (34).png
Run Atlantis	https://app.stepsecurity.io/github/runatlantis/atlantis/actions/runs/13792892350?jobId=38577975049	Untitled design (35).png
Fission	https://app.stepsecurity.io/github/fission/fission/actions/runs/13756535182	Untitled design (41).png
KubeReboot	https://app.stepsecurity.io/github/kubereboot/kured/actions/runs/13660925957	Untitled design (36).png
Chipsec	https://app.stepsecurity.io/github/chipsec/chipsec/actions/runs/13792742563	Untitled design (37).png
Bancolombia	https://app.stepsecurity.io/github/bancolombia/scaffold-clean-architecture/actions/runs/13747972292	Untitled design (39).png
Stirling PDF	https://app.stepsecurity.io/github/Stirling-Tools/Stirling-PDF/actions/runs/13793661314	Untitled design (38).png
NAV (Norwegian Labour and Welfare Administration)	https://app.stepsecurity.io/github/navikt/familie-ks-barnehagelister/actions/runs/13730067518	Untitled design (42).png
Digg Sweden	https://app.stepsecurity.io/github/diggsweden/cose-lib/actions/runs/13508705889	Untitled design (40).png

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.stepsecurity.io/resources/whos-using-harden-runner.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.