From be201be9dc4122209a1e9086ace9e07ef0279792 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 10 Jan 2025 06:21:56 +0000 Subject: [PATCH] Bump step-security/harden-runner from 2.10.2 to 2.10.3 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.2 to 2.10.3. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/0080882f6c36860b6ba35c610c98ce87d4e2f26f...c95a14d0e5bab51a9f56296a4eb0e416910cd350) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/codacy-analysis.yml | 2 +- .github/workflows/codecov.yml | 2 +- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/go.yml | 2 +- .github/workflows/golangci-lint.yml | 2 +- .github/workflows/mysql.yml | 2 +- .github/workflows/pg.yml | 2 +- .github/workflows/s2.yml | 2 +- 8 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/codacy-analysis.yml b/.github/workflows/codacy-analysis.yml index 1c90b51..88ac247 100644 --- a/.github/workflows/codacy-analysis.yml +++ b/.github/workflows/codacy-analysis.yml @@ -30,7 +30,7 @@ jobs: steps: # Checkout the repository to the GitHub Actions runner - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml index 4d5fba2..7d7a003 100644 --- a/.github/workflows/codecov.yml +++ b/.github/workflows/codecov.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index da1d8f7..c72c679 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -42,7 +42,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index a2ae470..a43cf05 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -12,7 +12,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index 847c684..8465822 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/mysql.yml b/.github/workflows/mysql.yml index 87376ad..2cde2fe 100644 --- a/.github/workflows/mysql.yml +++ b/.github/workflows/mysql.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit allowed-endpoints: > diff --git a/.github/workflows/pg.yml b/.github/workflows/pg.yml index 02e3383..de8e903 100644 --- a/.github/workflows/pg.yml +++ b/.github/workflows/pg.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit allowed-endpoints: > diff --git a/.github/workflows/s2.yml b/.github/workflows/s2.yml index 428f5e4..1415859 100644 --- a/.github/workflows/s2.yml +++ b/.github/workflows/s2.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs