From 35cd77bcf669054f67ffd3d2802ee54a4f13b5b6 Mon Sep 17 00:00:00 2001 From: Varun Sharma Date: Mon, 3 Aug 2026 19:24:47 -0700 Subject: [PATCH] docs: document the Global Block List in the features list The Global Block List shipped earlier but was never added to the README. It applies to both the Community and Enterprise tiers, so it is listed under Community (Free), which the Enterprise list already inherits. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 7acc07c..58d07b3 100644 --- a/README.md +++ b/README.md @@ -118,6 +118,7 @@ Harden-Runner offers a comprehensive suite of features to enhance the security o - **Automated Baseline Creation:** Harden-Runner builds a baseline for each job based on past outbound network connections. - **Anomaly Detection:** Once the baseline is created, any future outbound calls not in the baseline trigger a detection. - **Block Network Egress Traffic with Domain Allowlist:** Optionally use the automatically created baseline to control outbound network traffic by specifying allowed domains, preventing unauthorized data exfiltration. +- **Global Block List:** Block known-malicious domains and IP addresses tied to active supply chain attacks, maintained by StepSecurity's 24x7 SOC. No configuration required, new indicators apply automatically without an action version bump, and it is enforced even in `egress-policy: audit` mode. - **Detect Modification of Source Code:** Monitor and alert on unauthorized changes to your source code during the CI/CD pipeline. ### Enterprise (Paid)