[actions] add step security runner

.github/workflows/release.yml

@@ -8,6 +8,12 @@ jobs:
       contents: read
     runs-on: ubuntu-latest
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@v1
+        with:
+          allowed-endpoints:
+            github.com:443
+            registry.npmjs.org:443
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v2
         with: