https://github.com/step-security/harden-runner#how
https://github.com/step-security/harden-runner#how