7,000 Open-Source Projects Now Secured by Harden-Runner

StepSecurity's Harden-Runner has reached 7,000 open-source repositories protected, up from 6,000 just two months prior, now monitoring over 5 million CI/CD jobs per week. New capabilities introduced since the last milestone include impostor commit detection (alerting when a GitHub Action tag points to a commit not in the default branch), baseline monitoring for unusual outbound network activity, process-based detections (reverse shells, privileged containers, memory reads), and GitLab self-hosted runner support. The tool is free for public repositories via a Community Tier and is now also available on AWS Marketplace for enterprise procurement.