Add a reminder

We need a reminder add the step-security/harden-runner action at the top of every job. Co-authored-by: Nick <[email protected]>
cisagov · Sep 13, 2023 · bb81ec3 · bb81ec3
1 parent 9dc773c
commit bb81ec3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -18,6 +18,8 @@ jobs:
     name: Run diagnostics
     runs-on: ubuntu-latest
     steps:
+      # Note that a duplicate of this step must be added at the top of
+      # each job.
       - id: harden-runner
         name: Harden the runner
         uses: step-security/harden-runner@v2