self-hosted network filtering

.github/workflows/self-hosted-network-filtering-hr.yml

@@ -0,0 +1,33 @@
+name: "Self-Hosted (VM): Network Filtering with Harden-Runner"
+on:
+  workflow_dispatch:
+  push:
+jobs:
+  build:
+    runs-on: [self-hosted, ec2]
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: block
+          allowed-endpoints: >
+            *.docker.io:443
+            ghcr.io:443
+            github.com:443
+            registry.npmjs.org:443
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 18
+      - name: npm install
+        run: |
+          cd ./src/exfiltration-demo
+          npm install
+      - name: Publish to Registry
+        uses: elgohr/Publish-Docker-Github-Action@v5
+        with:
+          name: ${{ github.repository }}/prod:latest
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+          registry: ghcr.io
+          workdir: ./src/exfiltration-demo

.github/workflows/self-hosted-network-monitoring-hr.yml

@@ -1,7 +1,7 @@
 name: "Self-Hosted (VM): Network Monitoring with Harden-Runner"
 on:
   workflow_dispatch:
-  push:
+    
 jobs:
   build:
     runs-on: [self-hosted, ec2]