From 7377d8d407de33132f990188a7da18b6756abbf0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 14 Nov 2022 05:08:23 +0000 Subject: [PATCH] build(deps): bump step-security/harden-runner from 1.4.4 to 2.0.0 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 1.4.4 to 2.0.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/74b568e8591fbb3115c70f3436a0c6b0909a8504...ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- .github/workflows/publish.yaml | 10 +++++----- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2563ab80..0ae60605 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@74b568e8591fbb3115c70f3436a0c6b0909a8504 + uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs @@ -44,7 +44,7 @@ jobs: runs-on: "${{ matrix.os }}" steps: - name: Harden Runner - uses: step-security/harden-runner@74b568e8591fbb3115c70f3436a0c6b0909a8504 + uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 8231a8db..c9ee37e9 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -20,7 +20,7 @@ jobs: release_version: ${{ env.RELEASE_VERSION }} steps: - name: Harden Runner - uses: step-security/harden-runner@74b568e8591fbb3115c70f3436a0c6b0909a8504 # v1 + uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 # v1 with: egress-policy: audit @@ -46,7 +46,7 @@ jobs: needs: create-release steps: - name: Harden Runner - uses: step-security/harden-runner@74b568e8591fbb3115c70f3436a0c6b0909a8504 + uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs @@ -83,7 +83,7 @@ jobs: needs: create-release steps: - name: Harden Runner - uses: step-security/harden-runner@74b568e8591fbb3115c70f3436a0c6b0909a8504 + uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs @@ -117,7 +117,7 @@ jobs: needs: create-release steps: - name: Harden Runner - uses: step-security/harden-runner@74b568e8591fbb3115c70f3436a0c6b0909a8504 + uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs @@ -153,7 +153,7 @@ jobs: # needs: [ macos, windows, linux ] # steps: # - name: Harden Runner - # uses: step-security/harden-runner@74b568e8591fbb3115c70f3436a0c6b0909a8504 + # uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 # with: # egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs