From 81906ca54b1f47ee64f07b61b2dd72066f3a8491 Mon Sep 17 00:00:00 2001
From: Thinking-builder <15251793056@163.com>
Date: Fri, 5 Jun 2026 01:32:59 +0800
Subject: [PATCH] docs: document api-key fallback behavior

Signed-off-by: Thinking-builder <15251793056@163.com>
---
 action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index 9b5765c4..36bed216 100644
--- a/action.yml
+++ b/action.yml
@@ -33,7 +33,7 @@ inputs:
     required: false
     default: ""
   api-key:
-    description: "StepSecurity API key for authenticating with the policy store. Required when use-policy-store is set to true."
+    description: "StepSecurity API key for authenticating with the policy store. If omitted when use-policy-store is true, Harden-Runner defaults to audit mode."
     required: false
     default: ""
   use-policy-store: