Case Study: Coveo Strengthens GitHub Actions Security with StepSecurity

Coveo secures 300+ GitHub repositories with StepSecurity

Coveo, a market leader in AI-powered search and recommendations, faced significant security challenges with its extensive use of GitHub Actions across more than 300 repositories. Their security team needed deep observability and automated protection against potential threats like supply chain compromises and credential theft, which existing tools like CNAPPs and IDS could not adequately address. They turned to StepSecurity to find a solution that would secure their workflows without burdening their over 200 developers.

StepSecurity implemented its Harden-Runner solution, which provided Coveo with detailed security observability by establishing a baseline for each job and monitoring outbound network traffic, processes, and file operations. This enabled Coveo to quickly detect and respond to anomalies. Furthermore, StepSecurity automated the detection and remediation of security misconfigurations and provided automated scoring for third-party Actions. As a result, Coveo strengthened its GitHub Actions security posture with deep visibility and automated protection, scaling its efforts effectively across the organization.

Coveo