Release v2.0.0
- Feature to disable sudo: Use
disable-sudo: true
to run job steps without sudo access on the GitHub-hosted runner.disable-sudo
isfalse
by default and needs to be opted-into. (documentation) - File monitoring improvements: All source code files are monitored now for overwrite, instead of a few extensions. Instead of getting annotations for overwrites, you can also opt-in to getting email or Slack notifications if source code is overwritten. (documentation)
- Support for private repositories: Starting with Harder Runner v2.0.0, use of harden runner for private repositories will require a Team/ Enterprise license. Harder Runner GitHub Action is free for all public repositories.
What's Changed
- Update README.md by @varunsh-coder in #187
- Bump step-security/harden-runner from 1.4.5 to 1.5.0 by @dependabot in #188
- Bump github/codeql-action from 2.1.22 to 2.1.26 by @dependabot in #189
- Add scorecard by @varunsh-coder in #192
- Bump actions/checkout from 3.0.0 to 3.1.0 by @dependabot in #198
- Bump github/codeql-action from 2.1.26 to 2.1.27 by @dependabot in #197
- Bump actions/upload-artifact from 3.0.0 to 3.1.0 by @dependabot in #194
- Bump ossf/scorecard-action from 2.0.4 to 2.0.6 by @dependabot in #202
- Bump github/codeql-action from 2.1.27 to 2.1.28 by @dependabot in #201
- Bump actions/upload-artifact from 3.1.0 to 3.1.1 by @dependabot in #203
- Bump github/codeql-action from 2.1.28 to 2.1.29 by @dependabot in #204
- Update README by @varunsh-coder in #208
Full Changelog: v1...v2.0.0