build(deps): bump step-security/harden-runner from 1.4.4 to 2.4.1 (#77)
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 1.4.4 to 2.4.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/v1.4.4...55d479fb1c5bcad5a4f9099a5d9f37c8857b2845) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>master
parent
0e6e37e2b4
commit
36a735b671
|
@ -16,7 +16,7 @@ jobs:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
|
uses: step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845
|
||||||
with:
|
with:
|
||||||
disable-sudo: true
|
disable-sudo: true
|
||||||
egress-policy: block
|
egress-policy: block
|
||||||
|
@ -53,7 +53,7 @@ jobs:
|
||||||
runs-on: "${{ matrix.os }}"
|
runs-on: "${{ matrix.os }}"
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
|
uses: step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845
|
||||||
with:
|
with:
|
||||||
disable-sudo: true
|
disable-sudo: true
|
||||||
egress-policy: block
|
egress-policy: block
|
||||||
|
|
|
@ -30,7 +30,7 @@ jobs:
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v2.2.1
|
uses: step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.2.1
|
||||||
with:
|
with:
|
||||||
disable-sudo: true
|
disable-sudo: true
|
||||||
egress-policy: block
|
egress-policy: block
|
||||||
|
|
|
@ -17,7 +17,7 @@ jobs:
|
||||||
platform: [ 'x86_64-unknown-linux-gnu', 'aarch64-unknown-linux-gnu' ]
|
platform: [ 'x86_64-unknown-linux-gnu', 'aarch64-unknown-linux-gnu' ]
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
|
uses: step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845
|
||||||
with:
|
with:
|
||||||
egress-policy: block
|
egress-policy: block
|
||||||
allowed-endpoints: >
|
allowed-endpoints: >
|
||||||
|
@ -65,7 +65,7 @@ jobs:
|
||||||
python-version: ['3.8', '3.9', '3.10', '3.11']
|
python-version: ['3.8', '3.9', '3.10', '3.11']
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
|
uses: step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845
|
||||||
with:
|
with:
|
||||||
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
|
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
|
||||||
|
|
||||||
|
@ -94,7 +94,7 @@ jobs:
|
||||||
python-version: ['3.8', '3.9', '3.10', '3.11']
|
python-version: ['3.8', '3.9', '3.10', '3.11']
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
|
uses: step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845
|
||||||
with:
|
with:
|
||||||
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
|
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
|
||||||
|
|
||||||
|
@ -133,7 +133,7 @@ jobs:
|
||||||
contents: write # To add assets to a release.
|
contents: write # To add assets to a release.
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v2.1.0
|
uses: step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.1.0
|
||||||
with:
|
with:
|
||||||
disable-sudo: true
|
disable-sudo: true
|
||||||
egress-policy: block
|
egress-policy: block
|
||||||
|
@ -177,7 +177,7 @@ jobs:
|
||||||
id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
|
id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
uses: step-security/harden-runner@74b568e8591fbb3115c70f3436a0c6b0909a8504
|
uses: step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845
|
||||||
with:
|
with:
|
||||||
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
|
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue