--- title: Harden-Runner Block Mode Now Available for macOS and... description: Harden-Runner v2.20.0 extends egress block mode to macOS and Windows GitHub-hosted runners, previously only available on Linux. This allows teams to actively... canonical: https://daily.dev/posts/harden-runner-block-mode-now-available-for-macos-and-windows-github-hosted-runners-ovmu1ywab twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Harden-Runner Block Mode Now Available for macOS and Windows GitHub-Hosted Runners | daily.dev og:description: Harden-Runner v2.20.0 extends egress block mode to macOS and Windows GitHub-hosted runners, previously only available on Linux. This allows teams to actively... og:url: https://daily.dev/posts/harden-runner-block-mode-now-available-for-macos-and-windows-github-hosted-runners-ovmu1ywab og:image: https://api.daily.dev/og/posts/oVmu1YWaB.png og:image:alt: Harden-Runner Block Mode Now Available for macOS and Windows GitHub-Hosted Runners og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Harden-Runner Block Mode Now Available for macOS and Windows GitHub-Hosted Runners **[StepSecurity](https://daily.dev/sources/stepsecurity)** · 3 min read · 0 upvotes · 0 comments ## Summary Harden-Runner v2.20.0 extends egress block mode to macOS and Windows GitHub-hosted runners, previously only available on Linux. This allows teams to actively block unauthorized outbound network calls from CI pipelines rather than just auditing them. The update is particularly significant for macOS runners handling Apple signing certificates and Windows runners managing code signing credentials — both high-value targets in supply chain attacks like Megalodon and GhostAction. The recommended workflow is to start in audit mode, review the auto-generated policy, then switch to block mode to enforce egress controls across all OSes. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Runtime Security for Third-Party GitHub Actions Runners: Bitrise, Blacksmith, Depot, Namespace, and Warp](https://daily.dev/posts/runtime-security-for-third-party-github-actions-runners-bitrise-blacksmith-depot-namespace-and--x6jatli6z) · StepSecurity · 10 upvotes · 0 comments - [Introducing deny list egress policies for Harden-Runner](https://daily.dev/posts/introducing-deny-list-egress-policies-for-harden-runner-xvzbaknun) · StepSecurity · 0 upvotes · 0 comments - [Self-hosted runner minimum version enforcement paused](https://daily.dev/posts/self-hosted-runner-minimum-version-enforcement-paused-bkuwcq6px) · GitHub Changelog · 0 upvotes · 0 comments - [GitHub Actions hardens checkout security to block ‘pwn request’ attacks](https://daily.dev/posts/github-actions-hardens-checkout-security-to-block-pwn-request-attacks-9pqi2ntb0) · InfoWorld · 0 upvotes · 0 comments - [GitHub Separates Who Writes Code From Who Runs Your CI](https://daily.dev/posts/github-separates-who-writes-code-from-who-runs-your-ci-nku4hdcup) · DevOps.com · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cicd](https://daily.dev/tags/cicd), [#github-actions](https://daily.dev/tags/github-actions) [View this post on daily.dev](https://daily.dev/posts/harden-runner-block-mode-now-available-for-macos-and-windows-github-hosted-runners-ovmu1ywab) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Harden-Runner Block Mode Now Available for macOS and Windows GitHub-Hosted Runners","url":"https://daily.dev/posts/harden-runner-block-mode-now-available-for-macos-and-windows-github-hosted-runners-ovmu1ywab","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/harden-runner-block-mode-now-available-for-macos-and-windows-github-hosted-runners-ovmu1ywab"},"datePublished":"2026-07-15T23:09:14.111Z","dateModified":"2026-07-15T23:09:41.961Z","description":"Harden-Runner v2.20.0 extends egress block mode to macOS and Windows GitHub-hosted runners, previously only available on Linux. This allows teams to actively...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e22755657f5a8c4c2d7ecc66ead675af?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e22755657f5a8c4c2d7ecc66ead675af?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"StepSecurity","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"StepSecurity","logo":"https://media.daily.dev/image/upload/s--vegWii-S--/f_auto,q_auto/v1774959924/logos/stepsecurity?_a=BAMAMiWQ0","url":"https://daily.dev/sources/stepsecurity"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/harden-runner-block-mode-now-available-for-macos-and-windows-github-hosted-runners-ovmu1ywab","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cicd,github-actions","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"StepSecurity","item":"https://daily.dev/sources/stepsecurity"},{"@type":"ListItem","position":3,"name":"Harden-Runner Block Mode Now Available for macOS and Windows GitHub-Hosted Runners"}]} ```