From 7650360d744cb1d9fbfa5e5d6ebc2bbdc82938dc Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 3 Oct 2023 01:37:48 +0000 Subject: [PATCH] chore(deps): update step-security/harden-runner action to v2.6.0 --- .github/workflows/build.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/package-audit.yml | 2 +- .github/workflows/sonarscan.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index cea1ba19..11d60e24 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -27,7 +27,7 @@ jobs: name: Build and test (Node ${{ matrix.node }}, knex ${{ matrix.knex }}) steps: - name: Harden Runner - uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1 + uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0 with: egress-policy: audit diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 77f7e5c1..d71858d1 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -12,7 +12,7 @@ jobs: name: Review Dependencies steps: - name: Harden Runner - uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1 + uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/package-audit.yml b/.github/workflows/package-audit.yml index 0bb227f5..22e26969 100644 --- a/.github/workflows/package-audit.yml +++ b/.github/workflows/package-audit.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1 + uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0 with: allowed-endpoints: api.github.com:443 diff --git a/.github/workflows/sonarscan.yml b/.github/workflows/sonarscan.yml index 4df09870..48d63e5b 100644 --- a/.github/workflows/sonarscan.yml +++ b/.github/workflows/sonarscan.yml @@ -22,7 +22,7 @@ jobs: github.event_name == 'push' && !contains(github.event.head_commit.message, '[ci skip]') steps: - name: Harden Runner - uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1 + uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0 with: egress-policy: audit