diff --git a/.github/workflows/create-labels.yml b/.github/workflows/create-labels.yml index ee0d5a6..9beba3d 100644 --- a/.github/workflows/create-labels.yml +++ b/.github/workflows/create-labels.yml @@ -17,7 +17,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 + uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 3bed017..4ab1e5d 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -19,7 +19,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 + uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c with: disable-sudo: true egress-policy: block @@ -51,7 +51,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 + uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c with: egress-policy: audit @@ -74,7 +74,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 + uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c with: egress-policy: audit @@ -110,7 +110,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 + uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c with: egress-policy: audit @@ -146,7 +146,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 + uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c with: egress-policy: audit diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index ce48b46..398583a 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -17,7 +17,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 + uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 388678c..ea35cf4 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -18,7 +18,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 + uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c with: egress-policy: audit