diff --git a/.github/workflows/check.buildifier.yml b/.github/workflows/check.buildifier.yml index 514e83d..e59e64c 100644 --- a/.github/workflows/check.buildifier.yml +++ b/.github/workflows/check.buildifier.yml @@ -34,7 +34,7 @@ jobs: continue-on-error: true steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: egress-policy: audit - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5 diff --git a/.github/workflows/check.codeql.yml b/.github/workflows/check.codeql.yml index 14dd626..e7d924c 100644 --- a/.github/workflows/check.codeql.yml +++ b/.github/workflows/check.codeql.yml @@ -40,7 +40,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: egress-policy: audit - name: Checkout repository diff --git a/.github/workflows/check.lint-yaml.yml b/.github/workflows/check.lint-yaml.yml index d258326..fc95e41 100644 --- a/.github/workflows/check.lint-yaml.yml +++ b/.github/workflows/check.lint-yaml.yml @@ -56,7 +56,7 @@ jobs: pull-requests: "read" steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: disable-sudo: true egress-policy: block @@ -83,7 +83,7 @@ jobs: pull-requests: "read" steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/check.scorecards.yml b/.github/workflows/check.scorecards.yml index bbaa36e..2b79342 100644 --- a/.github/workflows/check.scorecards.yml +++ b/.github/workflows/check.scorecards.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: egress-policy: audit - name: "Checkout code" diff --git a/.github/workflows/deploy.docs.yml b/.github/workflows/deploy.docs.yml index dd871c3..748d267 100644 --- a/.github/workflows/deploy.docs.yml +++ b/.github/workflows/deploy.docs.yml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: egress-policy: audit - name: "Setup: Checkout" @@ -55,7 +55,7 @@ jobs: continue-on-error: true steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: egress-policy: audit - name: "Deploy: GitHub Pages" diff --git a/.github/workflows/module.build.yml b/.github/workflows/module.build.yml index 3d862f0..226006a 100644 --- a/.github/workflows/module.build.yml +++ b/.github/workflows/module.build.yml @@ -122,7 +122,7 @@ jobs: continue-on-error: ${{ inputs.labs }} steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: disable-sudo: true egress-policy: block @@ -372,7 +372,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/on.pr.yml b/.github/workflows/on.pr.yml index 6c546fb..74d6c57 100644 --- a/.github/workflows/on.pr.yml +++ b/.github/workflows/on.pr.yml @@ -32,7 +32,7 @@ jobs: contents: write steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: egress-policy: audit - name: "Setup: Checkout" @@ -50,7 +50,7 @@ jobs: pull-requests: write steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: egress-policy: audit - name: "Checkout Repository" diff --git a/.github/workflows/on.push.yml b/.github/workflows/on.push.yml index 5ae7c2a..fcd499d 100644 --- a/.github/workflows/on.push.yml +++ b/.github/workflows/on.push.yml @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 with: egress-policy: audit - name: "Setup: Checkout"