Browse Source
Bump step-security/harden-runner from 2.2.1 to 2.5.0 (#3132)
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.2.1 to 2.5.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](1f99358870...cba0d00b1fc9a034e1e642ea0f1103c282990604)
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mandlil <138015259+mandlil@users.noreply.github.com>
revert-3130-dependabot/github_actions/ossf/scorecard-action-2.2.0
dependabot[bot]
2 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with
5 additions and
5 deletions
-
.github/workflows/codeql.yml
-
.github/workflows/dependency-review.yml
-
.github/workflows/scorecards.yml
-
.github/workflows/unit-test.yml
|
|
|
@ -41,7 +41,7 @@ jobs: |
|
|
|
|
|
|
|
steps: |
|
|
|
- name: Harden Runner |
|
|
|
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v2.2.1 |
|
|
|
uses: step-security/harden-runner@cba0d00b1fc9a034e1e642ea0f1103c282990604 # v2.5.0 |
|
|
|
with: |
|
|
|
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
|
|
|
|
|
|
|
|
|
|
|
@ -17,7 +17,7 @@ jobs: |
|
|
|
runs-on: ubuntu-latest |
|
|
|
steps: |
|
|
|
- name: Harden Runner |
|
|
|
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v2.2.1 |
|
|
|
uses: step-security/harden-runner@cba0d00b1fc9a034e1e642ea0f1103c282990604 # v2.5.0 |
|
|
|
with: |
|
|
|
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
|
|
|
|
|
|
|
|
|
|
|
@ -31,7 +31,7 @@ jobs: |
|
|
|
|
|
|
|
steps: |
|
|
|
- name: Harden Runner |
|
|
|
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v2.2.1 |
|
|
|
uses: step-security/harden-runner@cba0d00b1fc9a034e1e642ea0f1103c282990604 # v2.5.0 |
|
|
|
with: |
|
|
|
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
|
|
|
|
|
|
|
|
|
|
|
@ -10,7 +10,7 @@ jobs: |
|
|
|
runs-on: ubuntu-latest |
|
|
|
steps: |
|
|
|
- name: Harden Runner |
|
|
|
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v2.2.1 |
|
|
|
uses: step-security/harden-runner@cba0d00b1fc9a034e1e642ea0f1103c282990604 # v2.5.0 |
|
|
|
with: |
|
|
|
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
|
|
|
|
|
|
|
@ -39,7 +39,7 @@ jobs: |
|
|
|
runs-on: ubuntu-latest |
|
|
|
steps: |
|
|
|
- name: Harden Runner |
|
|
|
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v2.2.1 |
|
|
|
uses: step-security/harden-runner@cba0d00b1fc9a034e1e642ea0f1103c282990604 # v2.5.0 |
|
|
|
with: |
|
|
|
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
|
|
|
|
|
|
|
|
