[StepSecurity] Apply security best practices #74

	# Vulnerability details at https://securitylab.github.com/advisories/GHSL-2023-271_changed-files/
	name: "Changed-Files Vulnerability: Without Harden-Runner"

	on:
	pull_request:
	branches:
	- main

	permissions:
	pull-requests: read

	jobs:
	changed_files:
	runs-on: ubuntu-latest
	name: Test changed-files
	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@v2
	with:
	egress-policy: audit

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0

	# Example 1
	- name: Get changed files
	id: changed-files
	uses: tj-actions/changed-files@56284d80811fb5963a972b438f2870f175e5b7c8 # v40.2.3

	- name: List all changed files
	run: \|
	for file in ${{ steps.changed-files.outputs.all_changed_files }}; do
	echo "$file was changed"
	done

Provide feedback