Bump step-security/harden-runner from 1.5.0 to 2.10.1 #1322

	# Copyright 2023 Wayback Archiver. All rights reserved.
	# Use of this source code is governed by the MIT
	# license that can be found in the LICENSE file.

	name: Testing

	on:
	push:
	branches:
	- "**"
	pull_request:
	branches:
	- main
	types:
	- opened
	- synchronize
	- reopened
	paths:
	- "package.json"
	- "*/.ts"
	- "*/.js"
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	testing:
	runs-on: ${{ matrix.os }}
	strategy:
	fail-fast: false
	matrix:
	os: [ ubuntu-latest, macos-latest, windows-latest ]
	node-version: [ 16.x, 18.x ]
	name: Testing
	steps:
	- name: Check out code base
	if: github.event_name == 'push' \|\| github.event_name == 'workflow_dispatch'
	uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
	with:
	fetch-depth: 0

	- name: Check out code base
	if: github.event_name == 'pull_request'
	uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
	with:
	fetch-depth: 0
	ref: ${{ github.event.pull_request.head.sha }}

	- name: Set up Node.js ${{ matrix.node-version }}
	uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
	with:
	node-version: ${{ matrix.node-version }}
	registry-url: 'https://registry.npmjs.org'

	- name: Get dependencies
	run: yarn install

	- name: Run test
	run: yarn run test --coverage

	- name: Run build
	run: yarn run build

	- name: Install cli
	run: yarn run cli:install

	- name: Run cli
	run: cairn

Provide feedback