Test QA deployment workflow (take 2)

.github/workflows/deploy_qa.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - master
+      - stepsecurity_remediation_1720535992
 
 permissions:
   contents: read
@@ -94,9 +95,14 @@ jobs:
   deploy_update:
     needs: build
     # Only push to the QA server when built on the master branch
-    if: ${{ github.ref_name == 'master' }}
+    #if: ${{ github.ref_name == 'master' }}
     runs-on: [self-hosted, thecombine]
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        with:
+          egress-policy: audit
+
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Deploy The Combine Update
         uses: ./.github/actions/combine-deploy-update