Merge pull request #165 from step-security/ashishkurmi-patch-1

Create anomalous-outbound-calls.yaml
step-security · Nov 21, 2023 · 261092a · 261092a
2 parents efbdd10 + 0e1e979
commit 261092a
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/.github/workflows/anomalous-outbound-calls.yaml b/.github/workflows/anomalous-outbound-calls.yaml
@@ -0,0 +1,16 @@
+name: Anomalous Outbound Calls
+on:
+  workflow_dispatch:
+jobs:
+  unexpected-outbound-calls:
+    name: AnomalousOutboundCalls
+    runs-on: ubuntu-latest
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@v2
+        with:
+          egress-policy: audit
+      - run: "curl https://attacker.com -L  || true"
+      - run: "curl https://google.com -L  || true"
+      - run: "curl microsoft.com:443  --connect-timeout 5 || true"
+      - run: "curl amazon.com:443  --connect-timeout 5 || true"