diff --git a/.github/workflows/_config.yml b/.github/workflows/_config.yml index 67e9cca9..88d2345d 100644 --- a/.github/workflows/_config.yml +++ b/.github/workflows/_config.yml @@ -39,7 +39,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 + uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 with: egress-policy: block allowed-endpoints: > @@ -64,7 +64,7 @@ jobs: platforms_json: ${{ steps.csv-to-json.outputs.platforms_json }} steps: - name: Harden Runner - uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 + uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index b9be61be..234c6c25 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -44,7 +44,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 + uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 with: # TODO: change to 'egress-policy: block' after couple of runs egress-policy: audit diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 1b9bf5ca..965e618a 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 + uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 with: # TODO: change to 'egress-policy: block' after couple of runs egress-policy: audit - name: 'Checkout Repository' diff --git a/.github/workflows/stale-issues.yml b/.github/workflows/stale-issues.yml index f797e9ff..b14a141e 100644 --- a/.github/workflows/stale-issues.yml +++ b/.github/workflows/stale-issues.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 + uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml index a94c5e62..7b3b1a85 100644 --- a/.github/workflows/sync-labels.yml +++ b/.github/workflows/sync-labels.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 + uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c