Simulate past supply chain attacks such as SolarWinds, Codecov, and ua-parser-js and see how Harden-Runner stops them. Harden-Runner GitHub Action installs a security agent on the GitHub-hosted runner (Ubuntu VM) to

• Prevent exfiltration of credentials
• Detect tampering of source code during build
• Enable running jobs without sudo access

While you can follow the hands-on tutorials on your own, you can also attend a free weekly instructor-led session. Register here.

This table lists the different attack methods you can simulate. In each case, you then use Harden-Runner to stop the attack.